Associate Engineer, Desktop Engineering (VDI/SCCM) at Employers

Job description

Associate Engineer, Desktop Engineering | 100% Remote (WFH) Opportunity Summary The Associate Engineer, Desktop Engineering owns imaging, deployment, and patch and configuration management for our Windows fleet, and administers our VDI environment, including gold image updates and application delivery. You work independently, act as an escalation point for complex end-user computing issues, and use automation and AI-assisted tools to keep a lean team efficient at scale. You provide backup support for Mac and mobile and cover the Service Desk when needed. What You'll Do Own monthly Windows patching with SCCM and Intune, including emergency and out-of-band patches Track, remediate, and report patch compliance to security and leadership Administer our production VDI environment (Omnissa Horizon): pools, farms, user session troubleshooting, and platform health Build, update, patch, and publish VDI gold images, and deliver applications through layering (e.g., App Volumes) Image, deploy, and provision desktops, laptops, and virtual desktops Manage third-party software patching and configuration, partnering with security on compliance and OS version consistency Serve as escalation point for complex hardware, software, and peripheral issues Provide backup support for Mac and mobile device provisioning, configuration, and patching Cover the Service Desk when needed, including onboarding and offboarding tickets Maintain documentation, SOPs, and knowledge base articles, and follow change management Contribute to OS migrations, hardware refreshes, and new endpoint tooling rollouts Build reusable playbooks and scripts for imaging, provisioning, and patching, and act as the team's practical automation lead Must-Have SCCM and Intune patching. You have run the full Patch Tuesday cycle on a laptop and PC fleet using SCCM (software update groups, ADRs, collections, maintenance windows) and Intune (update rings, feature update policies). Co-managed environments are a plus. Out-of-band patching and compliance. You have deployed emergency or zero-day patches with piloting, phased rollout, and rollback, and can track, remediate, and report compliance. VDI administration. You have managed a production Omnissa Horizon (or similar) environment day to day, including pools, farms, session troubleshooting, and platform health. Gold image and application delivery. You have built, updated, and patched gold images and delivered apps through layering, with a repeatable process for testing and publishing changes. Also Required 3 to 5 years in desktop engineering, endpoint management, or a senior service desk role Working knowledge of Active Directory, Microsoft 365 administration, Okta, and Mac/iOS management (Jamf or similar) Advanced troubleshooting across Windows, Mac, VDI, and peripherals Active use of approved AI assistants for troubleshooting and documentation, and experience building AI-assisted playbooks or automation Strong written and verbal communication, and sound judgment with limited oversight Ability to work flexible hours as business needs require Preferred Patch My PC or a comparable third-party patching tool Jira, Jira Service Management, Confluence, and CAB submissions Work Environment Remote: This role is a remote (work from home (WFH) opportunity) and only open to candidates currently located in the United States and able to work without sponsorship. It requires a suitable space that provides a private and quiet workplace. Expected Work Hours: Schedules are set to accommodate the requirements of the position and the needs of the organization and may be adjusted as needed. Travel: May be required to travel to off-site location(s) to attend meetings, as necessary Salary Range: $60,000 - $90,000 and a comprehensive benefits package, please follow the link to our benefits page for details! EMPLOYERS Benefits About EMPLOYERS As a dynamic, fast-growing provider of workers' compensation insurance and services, we are seeking a goal-oriented indi