Education

 

Bachelor's degree preferred

 

Work Experience

 

3+ years managing end points in an enterprise environment required 

5+ years of IT experience preferred 

 

Required Licenses/Certifications

 

None

 

Additional Knowledge, Skills and Abilities Required

 

• Proven, hands-on experience with Mac and Windows Desktop OS design, administration, configuration, security, Active Directory and Domain Management, Group Policy Management

• Automation and packaging of Windows Desktop OS and platform applications, as well as with the macOS and related automation platforms.

• Strong technical problem solving and root cause analysis skills

• Experience integrating peripherals with Mac and Windows OS

• Create software packages via various methods, including packaging for physical and virtual desktops (VDI) for automated unattended deployments.

• In depth knowledge and experience with server and desktop operating systems such as Windows Server 2019 and 2022, Windows 10/11, MacOS 14/15 (Sonoma/Sequia), and Linux Systems.

• Experience using Windows Autopatch, WSUS, SCCM/MECM, and/or 3rd party tools for updates and patch management 

• Expertise with MS Intune configuration, deployment, and ongoing support for corporate managed and BYO devices. 

• Developing and deploying applications using application packaging and deployment tools.

• Desire to learn new skills and technologies, and willingness to keep going with minimal supervision.

• Strong understanding of endpoint security fundamentals and OS hardening.

• Strong written and verbal communication skills.

• Experience with endpoint engineering concepts such as registry editing and command-line utilities.

• Familiarity with security tools such as EDR/XDR, firewall, and inventory management applications

• Track record of successful planning, analysis, implementation and testing of complex operating system software upgrades or new releases and assesses any impact to other software products being utilized.

 

Additional Knowledge, Skills, and Abilities Preferred

 

• Ability to leverage automation for administration tasks such as PowerShell scripting,  SCCM, and GPOs.

• Maintain standardized system configurations across operating environments utilizing configuration management framework and automation.

• Ability to identify and evaluate desktop OS and application solutions that enhance the security of the desktop environment, while balancing overall user experience and ease of use.

• Demonstrated ability to deliver complex IT projects on time and within budget 

• Thorough knowledge of network, host, and application technologies, particularly in a healthcare environment. 

• Familiarity and experience with healthcare regulatory compliance and reporting bodies (HIPAA, HITRUST, etc.) 

• Experience with IT Security and vulnerability remediation, penetration testing and systems hardening. 

• Advanced experience with Windows and Mac OS.

• Advanced experience with endpoint engineering concepts such as registry editing and command-line utilities (examples: msconfig, ipconfig, regedit)

• Scripting experience in one or more languages such as PowerShell, BASH, Windows Batch, VBScript.

• Familiarity with Microsoft's Active Directory, and how Organizational Units and Group Policies work.

 

ESSENTIAL FUNCTIONS

 

•    Perform implementation, administration, configuration, troubleshooting and maintenance within Windows OS, Mac, and iOS environments. 
•    Provide tier three support across the enterprise to research and resolve desktop OS and application issues. Ensure all client requests and operational problems are updated/resolved promptly. 
•    Write scripts to automate repetitive tasks or remotely perform functions on computers/devices.
•    Proactively improves processes and system improvements for workstation-related support.
•    Uses testing environment for thorough vetting of new configurations and methods, prior to deployment to customers.
•    Updates software deployment packages for remote installation on supported workstations and devices.
•    Remotely deploys software updates to supported enterprise computers and devices.
•    Creates and/or updates computer images to be used by helpdesk, field techs, and IAM team on new computers. 
•    Works closely with Security team to establish and improve security standards and ensure computers meet or exceed security requirements.
•    Serves as a source of technical knowledge for desktop support teams who need assistance on complicated problems related to our work.
•    Collaborate with other departments outside of IT on issues and larger projects
•    Documents standard operating procedures, endpoint architecture, and ticketing responses for use as future reference.
•    Assists with training other team members on technical topics.
•    Deploy applications to multiple computers over the enterprise network.
•    Create/implement configurations and deployments to corporate managed iOS devices  
•    Make the template image for an updated kiosk type computers in locations for exam rooms. 
•    Send out security or version updates on a regular schedule to applications and hardware.
•    Research new technologies and, if possible, implement them to improve IT processes.
•    Work effectively with cross-functional teams from IT, Engineering and business functions, including senior leadership team within and outside of your department and function. Collaborate with people from many different disciplines with varying degrees of technical experience.
•    Adapt to a constantly changing environment; flexibility to work extended hours and weekends if needed, occasional travel may be required.  
•    Responsible for performing security checks and prevent physical vulnerability, including implementation and monitoring policies and controls to ensure hardware and physical security, legal and regulatory compliance.
•    Occasional travel to healthcare facilities may be required.