Desktop Engineer
Savannah River National Laboratory
Summary
Ensure reliable, secure, and high-performing desktop, laptop, mobile and peripheral hardware/software operations. Work with a team of engineers on device lifecycles and drive modern IT automation.
Job description
Responsibilities
- Administer endpoint management platforms including Microsoft Intune and related configuration management tools to enforce patch compliance, device encryption, application deployment standards, and endpoint security configurations consistent with industry cybersecurity control frameworks
- Enterprise patch management cycles for endpoints, ensuring timely vulnerability remediation, documentation within ITSM change workflows, and validation of successful deployment prior to closure
- Collaborate with Identity, Credential, and Access Management (ICAM) teams to ensure workstation authentication controls, MFA enforcement, certificate deployment, and conditional access configurations are functioning properly within Microsoft Entra ID and Microsoft 365 integrations
- Validate endpoint log forwarding and monitoring integration with enterprise monitoring platforms to ensure visibility into device health, configuration compliance, and potential security anomalies
- Produce and maintain workstation engineering documentation including gold image standards, configuration baselines, lifecycle refresh schedules, and compliance dashboards
- Support root cause analysis for enterprise-wide endpoint incidents, configuration conflicts, or patch deployment failures and implement corrective actions to prevent recurrence
- Participate in Change Advisory Board (CAB) reviews to assess risk and approve major workstation environment changes prior to deployment
Minimum Qualifications
- Bachelor's Degree and 0-3 years of relevant experience OR an associate's degree with 4 years of relevant experience
- 8 years of relevant experience will also be considered in lieu of a degree
- Collaborate with other staff to research and resolve problems
- Demonstrate confidence, teamwork, promote collaboration, and communicate well with senior management, end users, and other customers
- Maintains knowledge of technology innovations and trends
- Ability to communicate with all levels of personnel up to and including senior executives
- For ability to obtain and maintain a security clearance, US Citizenship is Legally Required
Preferred Qualifications
- Experience engineering enterprise Windows desktop environments and secure configuration baselines
- Knowledge of endpoint management platforms including Intune or similar device management tools
- Experience administering endpoint patch management and application deployment processes
- Familiarity with endpoint encryption, Defender security controls, and compliance reporting
- Experience integrating workstation logs with SIEM platforms
- Knowledge of lifecycle refresh planning and endpoint inventory management
- Preferred Certifications: Microsoft Certified: Endpoint Administrator Associate; CompTIA Security+
Requirements
- Bachelor's Degree and 0-3 years of relevant experience OR an associate's degree with 4 years of relevant experience
- 8 years of relevant experience will also be considered in lieu of a degree
- Collaborate with other staff to research and resolve problems
- Demonstrate confidence, teamwork, promote collaboration, and communicate well with senior management, end users, and other customers
- Maintains knowledge of technology innovations and trends
- Ability to communicate with all levels of personnel up to and including senior executives
- US Citizenship is Legally Required for security clearance
- Experience engineering enterprise Windows desktop environments and secure configuration baselines
- Knowledge of endpoint management platforms including Intune or similar device management tools
- Experience administering endpoint patch management and application deployment processes
- Familiarity with endpoint encryption, Defender security controls, and compliance reporting
- Experience integrating workstation logs with SIEM platforms
- Knowledge of lifecycle refresh planning and endpoint inventory management
- Microsoft Certified: Endpoint Administrator Associate
- CompTIA Security+
Benefits
- Medical, Dental & Vision
- HSA options
- Short-term disability
- Long-term disability
- Life insurance
- AD&D insurance
- Savings and investment plan
- Paid time off
- Employee assistance plan
- Relocation package
Company overview
Savannah River National Laboratory (SRNL) is a premier U.S. Department of Energy national laboratory specializing in applied research and development for environmental management, national security, and energy resilience. Established in 1951 during the Cold War era, SRNL operates as a multi-program federally funded R&D center managed by Battelle Savannah River Alliance. With over 1,400 dedicated professionals including scientists, engineers, and technical staff, the laboratory focuses on three core mission areas: environmental stewardship, national security, and energy security. SRNL's expertise spans nuclear materials management, environmental remediation, cybersecurity, and advanced manufacturing technologies. As one of 17 DOE national laboratories, it plays a critical role in maintaining America's nuclear deterrent, reducing global nuclear threats, and developing innovative solutions for environmental cleanup. The laboratory operates specialized facilities including radiologically controlled laboratories, ultra-low-level counting facilities, and the only radiological crime investigation laboratory in the United States, making it a vital asset for national security and scientific advancement.