Windows Desktop Engineer

Location: Cedar Rapids, IA Onsite Only USC/GC On W2 Experience: Minimum 7 – 10 Years of Relevant Experience Job Description The Windows Desktop Engineer is responsible for designing, implementing, and maintaining secure Windows endpoint configurations across the enterprise. The role focuses on endpoint hardening, Group Policy management, security compliance, configuration governance, and automation of recurring remediation activities. The engineer collaborates closely with infrastructure and cybersecurity teams to reduce vulnerability recurrence and strengthen security controls. Key Responsibilities Develop and maintain enterprise desktop configuration standards.Design and implement Group Policy controls and security baselines.Manage endpoint hardening initiatives.Identify and remediate configuration drift issues.Implement policy-based security controls and automated remediation.Partner with security teams on compliance and audit initiatives.Support enterprise Windows operating system lifecycle management.Drive automation to reduce operational support effort. Required Skillset Technical Skills Windows 10/11 Enterprise AdministrationGroup Policy (GPO) Design and ManagementMicrosoft IntuneMicrosoft Endpoint Configuration Manager (MECM/SCCM)Active DirectoryPowerShell ScriptingWindows Security BaselinesEndpoint Hardening and Compliance FrameworksMicrosoft Defender Suite Preferred Skills CIS Benchmark ImplementationAzure AD / Entra IDZero Trust Security ModelsAutomation and Configuration ManagementVulnerability Management Tools Soft Skills Strategic thinkingProcess improvement mindsetDocumentation and governanceStrong stakeholder management Skills: azure active directory,microsoft endpoint configuration,microsoft intune,group policy (gpo) design and management