Description
We are looking for a senior , hands-on EUC Engineer to build, run, and support our 100% cloud-native digital workspace. The role combines deep engineering across virtual desktops, endpoint management, application control, privilege management, secure access, operating-system lifecycle management, and onsite desktop support. You will be the technical expert for the EUC stack and the escalation point for complex issues, while remaining visible and approachable to end users on site.
Key Responsibilities
Virtual Desktop & Application Delivery (Omnissa)
Engineer and support Omnissa Horizon Cloud (DaaS) on Azure, including Horizon Edge, Universal Broker, Unified Access Gateway, pools, and entitlements.
Build and manage App Volumes, including application packaging, app stacks/packages, writable volumes, assignments, lifecycle, and performance tuning.
Configure Dynamic Environment Manager (DEM) for user personalization, policy, and profile management.
Own the golden-image lifecycle, including automated builds, optimization, patching, versioning, and rollback.
Endpoint Management
Administer Microsoft Intune for endpoints, including Autopilot, compliance, configuration profiles, Win32/MSIX applications, update rings, and Conditional Access integration.
Manage Workspace ONE UEM, including coexistence with Intune and migration where appropriate.
Use PDQ Connect for cloud-based software deployment, inventory, and rapid remediation.
Maintain endpoint baselines, hardening standards, and zero-touch provisioning.
EUC & Operating-System Engineering Expectations
Own the endpoint operating-system lifecycle for Windows and macOS, including standards, build strategy, configuration, patching, upgrades, rollback, and retirement.
Assess OS currency, vendor supportability, hardware readiness, security exposure, application dependencies, driver compatibility, and user impact.
Evaluate proposed OS upgrades and provide clear technical recommendations based on business requirements, device readiness, application compatibility, security risk, and vendor-support timelines.
Develop and maintain OS upgrade plans covering discovery, readiness assessment, pilot deployment, testing, phased rollout, rollback, validation, and post-deployment support.
Make informed technical decisions regarding OS configuration, patching, upgrade readiness, deployment sequencing, exception handling, and issue remediation within architecture, security, and change-management standards.
Perform upgrade-readiness assessments, including hardware and driver validation, application testing, encryption, endpoint-security controls, network access, and user-impact analysis.
Define and maintain standard endpoint builds, supported OS versions, configuration baselines, compliance policies, and upgrade success criteria.
Use endpoint-management and automation tools to deploy OS updates, monitor adoption, identify failures, remediate issues, and report compliance.
Create implementation plans, test evidence, change records, rollback procedures, operational documentation, knowledge articles, and stakeholder communications for OS changes.
Coordinate OS upgrades with application owners, security, infrastructure, service management, vendors, and business stakeholders.
Security & Access Control
Manage BeyondTrust EPM policies for least privilege, elevation requests, and application rules.
Operate Airlock Digital allowlisting, including baselining, trusted publishers and paths, exception handling, and policy changes.
Work with SecOps on vulnerability remediation, incident response, and audit evidence.
Monitoring & Experience
Use ControlUp for real-time monitoring, root-cause analysis, and automated remediation across VDI and physical endpoints.
Build dashboards and KPIs for performance, availability, and user experience.
Manage Wyse Management Suite (WMS).
Azure & Automation
Automate endpoint and workspace operations with PowerShell, Microsoft Graph API, Terraform, Bicep, and related tooling.
Onsite Desktop Support (Location-Based)
Provide deskside and walk-up support for laptops, desktops, thin clients, peripherals, docking stations, and meeting-room technology.
Perform hands-on device provisioning and Autopilot onboarding, reimaging or reset, hardware swaps, device refresh, and Windows 11 upgrade activities.
Handle joiner, mover, and leaver device activities, including asset tagging, handover, collection, and secure disposal.
Troubleshoot onsite issues across Windows, macOS, mobile devices, printing, Wi-Fi, VPN/ZTNA, VDI clients, and Microsoft 365 applications.
Support VIP and executive users, onsite events, town halls, and office moves.
Coordinate with vendors for hardware repairs, warranty claims, and logistics.
Maintain accurate asset inventory, spares, and stock levels at each site.
Log and manage tickets in ITSM platforms such as ServiceNow or Jira, meet SLAs, and take ownership of complex problems.
Operations & Collaboration
Act as the escalation point for the service desk, perform problem management, and write runbooks and knowledge articles.
Plan and run changes, testing, and phased rollouts.
Mentor junior engineers and desktop support technicians.
Contribute design input and technical recommendations to the EUC roadmap.
Required Qualifications
7+ years of experience in EUC, endpoint engineering, VDI, or desktop support and engineering.
Hands-on production experience with Omnissa Horizon Cloud/DaaS, App Volumes, and DEM.
Strong Microsoft Intune, Entra ID, and Conditional Access skills.
Working experience with Workspace ONE UEM.
Hands-on experience with at least three of the following: BeyondTrust EPM, Airlock Digital, Netskope, ControlUp, and PDQ Connect.
Solid Azure knowledge covering networking, identity, VDI compute and storage, and governance.
Strong PowerShell scripting skills; familiarity with infrastructure as code and CI/CD.
Understanding of Zero Trust, least privilege, and application-control principles.
Proven onsite desktop-support experience with strong customer-service skills.
Demonstrated experience assessing OS upgrades, resolving compatibility issues, and governing phased endpoint deployments.
Ability to design solutions and write clear technical documentation.
Skills
virtual desktop infrastructure, intune, desktop support, imaging, troubleshooting, patch management, workspace one, omnissa horizon cloud, imaging software, imaging computers
Additional Skills & Qualifications
Preferred Qualifications
Microsoft MD-102 or AZ-104, Omnissa Horizon or Workspace ONE, and ITIL Foundation certifications.
Experience migrating between Intune and Workspace ONE.
Autopilot, Win32/MSIX packaging, and Windows 11 migration experience.
Experience supporting macOS lifecycle management and enterprise OS-upgrade programs.
Soft Skills
- Customer-focused, calm under pressure, a clear communicator with technical and non-technical users, security-minded, decisive, collaborative, and thorough in documentation.
Job Type & Location
This is a Contract position based out of Columbia, MD.
Pay and Benefits
The pay range for this position is $25.00 - $35.00/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)
Job Type & Location
This is a Contract position based out of Columbia, MD.
Application Deadline
This position is anticipated to close on Nov 7, 2026.
Workplace Type
This is a fully onsite position in Columbia,MD.
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services
Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
