Title: Senior Desktop Engineer — AmLaw 100 Financial/Legal Services Firm
Location: New York, NY (onsite)
Type: Direct Hire / Permanent
Compensation: $170,000–$180,000
About the Role:
Our client, a globally recognized professional services organization serving high-profile institutional clients, is seeking a Senior Desktop Engineer to join a large, mature Systems Engineering team. This is a hands-on Level 3 role supporting a modern, security-conscious enterprise environment — ideal for someone who wants deep technical ownership without sacrificing the stability and scale of an established organization.
What You'll Do:
- Lead deployment, patching, and compliance reporting across a large enterprise endpoint fleet using MECM/SCCM
- Own Microsoft Intune (MEM/MDM) administration — device configuration, compliance policies, Conditional Access
- Package and deploy applications using MSI/MSIX formats, converting to Intunewin (Win32 App) as needed
- Administer Microsoft 365 Apps, Entra ID (Azure AD), and hybrid identity configurations
- Support Azure Virtual Desktop environments including FSLogix and session host imaging
- Build PowerShell/Microsoft Graph API automation for identity and endpoint management tasks
- Manage Windows Autopilot deployment, BitLocker with Intune key escrow, and modern driver management
What We're Looking For:
- 7+ years of hands-on desktop/systems engineering experience
- Strong, stable tenure history — this is a long-term, career-track opportunity, not a revolving-door contract seat
- Deep Intune, MECM, and Entra ID experience
- Application packaging experience (Flexera AdminStudio a strong plus)
- Experience in a high-security, high-compliance, or professional services environment strongly preferred
- Bachelor's degree preferred, not required
Why This Role:
Join a well-resourced, technically sophisticated team at an organization where IT directly protects client confidentiality and business-critical operations. This is a rare permanent opportunity at this compensation band with a team investing heavily in modern endpoint and identity infrastructure.
