Senior Desktop Engineer - Cloud

Overview:

The Desktop Engineer Sr Associate plays a critical role within ISS’s global IT Service Delivery organization, serving as a key contributor to the Desktop Engineering team. This role is responsible for the design, implementation, and support of modern endpoint management solutions, with a strong focus on application packaging, configuration management, and maintaining a robust security posture across all Intune-managed devices. The ideal candidate brings deep technical expertise in Microsoft Intune, Endpoint Manager, and application lifecycle management, and is passionate about delivering secure, scalable, and user-centric solutions. This individual will lead efforts to package and deploy applications, enforce configuration baselines, and ensure compliance with enterprise security standards across Windows and macOS environments.

In addition to technical responsibilities, the role requires strong collaboration with global teams across the US, EMEA, and APAC regions, providing Tier 3 support and driving continuous improvement in endpoint operations. The successful candidate is an independent thinker, proactive problem solver, and effective communicator who thrives in a fast-paced, service-oriented environment. Key attributes include the ability to prioritize effectively, a commitment to learning and innovation, and a strong customer success mindset. This role is instrumental in shaping the digital workplace experience at ISS through modern device management, automation, and security best practices.

Responsibilities:

• Package, update, and deploy applications using Microsoft Intune, ensuring alignment with enterprise standards and compliance requirements.
• Manage application lifecycle within SDLC protocols, including testing, validation, and deployment phases.
• Design and maintain infrastructure for Microsoft Endpoint Manager (Intune), including Autopilot provisioning, Windows patching, and hardware specification compliance.
• Administer and integrate co-management environments (Intune + SCCM) with Azure AD, ensuring seamless transition and operational efficiency.
• Configure and manage Device Configuration Policies, Compliance Policies, and Microsoft 365 Security Products (Defender for Endpoint, MDAV, Azure RMS).
• Monitor and report on the health and compliance of the desktop environment, ensuring timely patching and remediation of vulnerabilities.
• Architect and implement scalable endpoint management solutions for Windows and macOS devices.
• Conduct audits to identify gaps in security and compliance, and implement corrective actions.
• Utilize Microsoft Defender and other endpoint protection tools to maintain device security posture.
• Collaborate with cross-functional teams to support application packaging, deployment, and endpoint management initiatives.
• Participate in the imaging and provisioning of Windows 11 and macOS devices, including application packaging, patching, and deployment.
• Build, configure, and deploy software packages; perform license audits and resolve operational issues.
• Coordinate with IT teams to support planning, design, and deployment of applications and management systems.
• Ensure seamless integration of desktop systems with enterprise infrastructure (e.g., file servers, email, conferencing, and administrative systems).
• Support procurement processes by assessing technical requirements for hardware/software purchases.
• Document engineering procedures and contribute to the development of global support standards and documentation.
• Provide Tier 3 support and collaborate with service desk teams to ensure timely resolution of issues.
• Maintain a business-focused approach to IT service delivery, including metrics and reporting.

Qualifications:

• 3+ years of hands-on experience with Intune Autopilot deployments, application packaging, patching, and deployment ring management.
• 5+ years of experience in desktop engineering, including building, configuring, and supporting Windows PCs and laptops.
• 3+ years working in an Intune-managed environment, with deep knowledge of endpoint configuration and policy management.
• 3+ years supporting Windows 10/11 in enterprise environments.
• 5+ years of experience with Active Directory, Group Policy, and identity management.
• 3+ years supporting Microsoft 365 applications and services.
• Experience managing macOS devices via Intune MDM or AirWatch.
• Familiarity with PowerShell scripting for automation and troubleshooting.
• Experience with ITSM platforms such as ServiceNow, Jira, or Remedy.
• Knowledge of enterprise hardware platforms (Dell, Lenovo, HP, Apple) and mobile device support (iOS, Android).
• Understanding of ITIL framework and structured service desk operations.
• Strong written and verbal communication skills; ability to document procedures and communicate effectively with stakeholders.
• Certifications such as: Microsoft 365 Certified: Enterprise Administrator Expert, Microsoft Certified: Endpoint Administrator Associate, CompTIA A+, MCSE, or other relevant certifications.
• Familiarity with Windows 11 security features (BitLocker, MBAM, Device Guard, Credential Guard).
• Bachelor’s degree in a related field or equivalent professional experience.
• Strong analytical, problem-solving, and critical thinking skills.
• Ability to work across time zones and adapt to fast-paced environments.

#MIDSENIOR

#LI-KK1

What You Can Expect from Us

At ISS STOXX, our people are our driving force. We are committed to building a culture that values diverse skills, perspectives, and experiences. We hire the best talent in our industry and empower them with the resources, support, and opportunities to grow—professionally and personally.

Together, we foster an environment that fuels creativity, drives innovation, and shapes our future success.

Let’s empower, collaborate, and inspire.

Let’s be #BrilliantTogether.

About ISS STOXX

ISS STOXX GmbH is a leading provider of research and technology solutions for the financial market. Established in 1985, we offer top-notch benchmark and custom indices globally, helping clients identify investment opportunities and manage portfolio risks. Our services cover corporate governance, sustainability, cyber risk, and fund intelligence. Majority-owned by Deutsche Börse Group, ISS STOXX has over 3,400 professionals in 33 locations worldwide, serving around 6,400 clients, including institutional investors and companies focused on ESG, cyber, and governance risk. Clients trust our expertise to make informed decisions for their stakeholders' benefit.

Visit our website: https://www.issgovernance.com

View additional open roles: https://www.issgovernance.com/join-the-iss-team/

Institutional Shareholder Services (“ISS”) is committed to fostering, cultivating, and preserving a culture of diversity and inclusion. It is our policy to prohibit discrimination or harassment against any applicant or employee on the basis of race, color, ethnicity, creed, religion, sex, age, height, weight, citizenship status, national origin, social origin, sexual orientation, gender identity or gender expression, pregnancy status, marital status, familial status, mental or physical disability, veteran status, military service or status, genetic information, or any other characteristic protected by law (referred to as “protected status”). All activities including, but not limited to, recruiting and hiring, recruitment advertising, promotions, performance appraisals, training, job assignments, compensation, demotions, transfers, terminations (including layoffs), benefits, and other terms, conditions, and privileges of employment, are and will be administered on a non-discriminatory basis, consistent with all applicable federal, state, and local requirements.