IT Desktop Endpoint Engineer

Desktop Endpoint Engineer – Contract

Location: Port St. Lucie, Florida area
Assignment: Six-month contract with the possibility of extension
Industry: Financial services

Position Overview

A growing financial-services organization is seeking an experienced Desktop Endpoint Engineer to strengthen the security, reliability, and overall health of its Windows workstation environment. Candidates located in the Port St. Lucie area are preferred, although the organization will consider a qualified professional working remotely.

This is an endpoint engineering position—not a traditional desktop support role. The consultant will work extensively with Microsoft Configuration Manager and Microsoft Intune to package applications, deploy updates, remediate vulnerabilities, maintain endpoint policies, and troubleshoot complex workstation issues.

The engineer will collaborate with infrastructure, cybersecurity, IT operations, and Service Desk teams to keep managed devices compliant, current, and supportable. This person will also serve as an escalation resource for endpoint problems requiring deeper technical analysis.

Primary Responsibilities

• Build, test, deploy, and maintain enterprise application packages using Microsoft Configuration Manager and Microsoft Intune.
• Coordinate Windows, Microsoft 365, security, and third-party application patch deployments.
• Investigate vulnerability findings, confirm affected devices, determine corrective actions, and track remediation through completion.
• Administer Configuration Manager applications, packages, deployments, device collections, compliance reports, and client configurations.
• Manage Intune application deployments, device profiles, compliance policies, remediation scripts, and endpoint-management workflows.
• Support Windows 11 feature updates, servicing schedules, deployment readiness, testing, and post-upgrade troubleshooting.
• Maintain and troubleshoot Microsoft 365 Apps for enterprise, including update channels and workstation configurations.
• Develop and maintain Group Policy and Intune policies supporting security requirements and consistent endpoint configurations.
• Create PowerShell and Intune remediation scripts that identify and automatically correct endpoint issues.
• Diagnose failed software installations, patching problems, compliance failures, configuration drift, and unhealthy endpoint clients.
• Review Windows event logs, deployment logs, management dashboards, and compliance reports to identify root causes and recurring trends.
• Assist the Service Desk with escalated workstation, application, policy, patching, and device-compliance issues.
• Partner with cybersecurity and infrastructure teams to address endpoint vulnerabilities and security findings.
• Participate in change-control activities, including testing, implementation planning, validation, documentation, and communication.
• Maintain technical procedures, packaging documentation, troubleshooting guides, and endpoint-management standards.
• Recommend improvements that increase endpoint security, automation, stability, and operational efficiency.

Required Experience

• Professional experience in endpoint engineering, desktop engineering, end-user computing, or Windows endpoint administration.
• Hands-on administration of Microsoft Configuration Manager, also known as SCCM, MECM, or ConfigMgr.
• Hands-on experience managing applications, configurations, and compliance policies through Microsoft Intune.
• Experience creating and maintaining enterprise application packages.
• Experience deploying and troubleshooting Windows, Microsoft 365, and third-party application updates.
• Understanding of vulnerability validation, remediation, exception management, and reporting.
• Strong knowledge of Windows 11 administration, servicing, lifecycle management, and troubleshooting.
• Experience creating, maintaining, and troubleshooting Group Policy configurations.
• PowerShell scripting skills related to endpoint automation, reporting, software deployment, and remediation.
• Ability to interpret endpoint-management logs and diagnostic information to determine the root cause of technical issues.
• Experience resolving Tier 2 or advanced endpoint issues escalated by a Service Desk.
• Strong documentation, communication, troubleshooting, and organizational skills.
• Ability to work independently while coordinating with security, infrastructure, operations, and support teams.

Preferred Experience

• Azure Virtual Desktop, including multi-session environments, image maintenance, application deployment, or policy management.
• Windows Autopilot provisioning and troubleshooting.
• Creation of Intune Win32 application packages, detection rules, requirement rules, dependencies, supersedence, and update processes.
• Packaging and maintaining third-party or internally developed Windows applications.
• Endpoint certificate deployment, renewal, trust-chain analysis, or certificate troubleshooting.
• Microsoft Copilot readiness or Microsoft 365 productivity integrations.
• Experience working in banking, financial services, insurance, healthcare, or another regulated industry.
• Microsoft certifications related to Intune, Configuration Manager, Windows, Microsoft 365, or endpoint administration.