Windows desktop security engineer

Job Overview

The Windows Desktop Engineer is responsible for designing, implementing, and maintaining secure Windows endpoint configurations across the enterprise. The role focuses on endpoint hardening, Group Policy management, security compliance, configuration governance, and automation of recurring remediation. The engineer collaborates closely with infrastructure and cybersecurity teams to reduce vulnerability recurrence and strengthen security controls.

Responsibilities

• Develop and maintain enterprise desktop configuration standards.
• Design and implement Group Policy controls and security baselines.
• Manage endpoint hardening initiatives.
• Identify and remediate configuration drift issues.
• Implement policy-based security controls and automated remediation.
• Partner with security teams on compliance and audit initiatives.
• Support enterprise Windows operating system lifecycle management.
• Drive automation to reduce operational support effort.

Technical Skills

• Windows 10/11 Enterprise Administration.
• Group Policy (GPO) Design and Management.
• Microsoft Intune.
• Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Active Directory.
• PowerShell Scripting.
• Windows Security Baselines.
• Endpoint Hardening and Compliance Frameworks.
• Microsoft Defender Suite.

Preferred Skills

• CIS Benchmark Implementation.
• Azure AD / Entra ID.
• Zero Trust Security Models.
• Automation and Configuration Management.
• Vulnerability Management Tools.

Soft Skills

• Strategic thinking.
• Process improvement mindset.
• Documentation and governance.
• Strong stakeholder management.