Senior EUC Engineer

About the Role

We are looking for a senior, hands-on EUC Engineer to build, run, and support our 100% cloud-native digital workspace. The role combines deep engineering across virtual desktops, endpoint management, application control, privilege management, secure access, operating-system lifecycle management, and onsite desktop support. You will be the technical expert for the EUC stack and the escalation point for complex issues, while remaining visible and approachable to end users on site.

Key Responsibilities Virtual Desktop & Application Delivery (Omnissa)

• Engineer and support Omnissa Horizon Cloud (DaaS) on Azure, including Horizon Edge, Universal Broker, Unified Access Gateway, pools, and entitlements.
• Build and manage App Volumes, including application packaging, app stacks/packages, writable volumes, assignments, lifecycle, and performance tuning.
• Configure Dynamic Environment Manager (DEM) for user personalization, policy, and profile management.
• Own the golden-image lifecycle, including automated builds, optimization, patching, versioning, and rollback.

Endpoint Management

• Administer Microsoft Intune for endpoints, including Autopilot, compliance, configuration profiles, Win32/MSIX applications, update rings, and Conditional Access integration.
• Manage Workspace ONE UEM, including coexistence with Intune and migration where appropriate.
• Use PDQ Connect for cloud-based software deployment, inventory, and rapid remediation.
• Maintain endpoint baselines, hardening standards, and zero-touch provisioning.

EUC & Operating-System Engineering Expectations

Own the endpoint operating-system lifecycle for Windows and macOS, including standards, build strategy, configuration, patching, upgrades, rollback, and retirement. Assess OS currency, vendor supportability, hardware readiness, security exposure, application dependencies, driver compatibility, and user impact. Evaluate proposed OS upgrades and provide clear technical recommendations based on business requirements, device readiness, application compatibility, security risk, and vendor-support timelines. Develop and maintain OS upgrade plans covering discovery, readiness assessment, pilot deployment, testing, phased rollout, rollback, validation, and post-deployment support. Make informed technical decisions regarding OS configuration, patching, upgrade readiness, deployment sequencing, exception handling, and issue remediation within architecture, security, and change-management standards. Perform upgrade-readiness assessments, including hardware and driver validation, application testing, encryption, endpoint-security controls, network access, and user-impact analysis. Define and maintain standard endpoint builds, supported OS versions, configuration baselines, compliance policies, and upgrade success criteria. Use endpoint-management and automation tools to deploy OS updates, monitor adoption, identify failures, remediate issues, and report compliance. Create implementation plans, test evidence, change records, rollback procedures, operational documentation, knowledge articles, and stakeholder communications for OS changes. Coordinate OS upgrades with application owners, security, infrastructure, service management, vendors, and business stakeholders.

Security & Access Control

• Manage BeyondTrust EPM policies for least privilege, elevation requests, and application rules.
• Operate Airlock Digital allowlisting, including baselining, trusted publishers and paths, exception handling, and policy changes.
• Work with SecOps on vulnerability remediation, incident response, and audit evidence.

Monitoring & Experience

• Use ControlUp for real-time monitoring, root-cause analysis, and automated remediation across VDI and physical endpoints.
• Build dashboards and KPIs for performance, availability, and user experience.
• Manage Wyse Management Suite (WMS).

Azure & Automation

• Automate endpoint and workspace operations with PowerShell, Microsoft Graph API, Terraform, Bicep, and related tooling.

Onsite Desktop Support (Location-Based)

• Provide deskside and walk-up support for laptops, desktops, thin clients, peripherals, docking stations, and meeting-room technology.
• Perform hands-on device provisioning and Autopilot onboarding, reimaging or reset, hardware swaps, device refresh, and Windows 11 upgrade activities.
• Handle joiner, mover, and leaver device activities, including asset tagging, handover, collection, and secure disposal.
• Troubleshoot onsite issues across Windows, macOS, mobile devices, printing, Wi-Fi, VPN/ZTNA, VDI clients, and Microsoft 365 applications.
• Support VIP and executive users, onsite events, town halls, and office moves.
• Coordinate with vendors for hardware repairs, warranty claims, and logistics.
• Maintain accurate asset inventory, spares, and stock levels at each site.
• Log and manage tickets in ITSM platforms such as ServiceNow or Jira, meet SLAs, and take ownership of complex problems.

Operations & Collaboration

• Act as the escalation point for the service desk, perform problem management, and write runbooks and knowledge articles.
• Plan and run changes, testing, and phased rollouts.
• Mentor junior engineers and desktop support technicians.
• Contribute design input and technical recommendations to the EUC roadmap.

Required Qualifications

• 7+ years of experience in EUC, endpoint engineering, VDI, or desktop support and engineering.
• Hands-on production experience with Omnissa Horizon Cloud/DaaS, App Volumes, and DEM.
• Strong Microsoft Intune, Entra ID, and Conditional Access skills.
• Working experience with Workspace ONE UEM.
• Hands-on experience with at least three of the following: BeyondTrust EPM, Airlock Digital, Netskope, ControlUp, and PDQ Connect.
• Solid Azure knowledge covering networking, identity, VDI compute and storage, and governance.
• Strong PowerShell scripting skills; familiarity with infrastructure as code and CI/CD.
• Understanding of Zero Trust, least privilege, and application-control principles.
• Proven onsite desktop-support experience with strong customer-service skills.
• Demonstrated experience assessing OS upgrades, resolving compatibility issues, and governing phased endpoint deployments.
• Ability to design solutions and write clear technical documentation.

Preferred Qualifications

• Microsoft MD-102 or AZ-104, Omnissa Horizon or Workspace ONE, and ITIL Foundation certifications.
• Experience migrating between Intune and Workspace ONE.
• Autopilot, Win32/MSIX packaging, and Windows 11 migration experience.
• Experience supporting macOS lifecycle management and enterprise OS-upgrade programs.