Senior Digital Workplace Operations Engineer

It's an exciting time to be a member of the Fisher Investments Technology Department. We are looking for an Senior DWP Endpoint Management Operations Engineer to support our Infrastructure and Operations team. If you are looking for an opportunity to make a difference as we develop scalable and strategic solutions to support our global growth, we want to hear from you!

The Opportunity:

This Senior Digital Workplace Endpoint Management Operations Engineer role is responsible ensuring efficient and effective operational support for endpoint management and application deployments across the global organization. You will be responsible for various aspects of device management, including software packaging, operating system deployment, patch management, and supporting security compliance of the deployments. You will work closely with cross-functional teams, collaborate on deployment needs, and implement process improvements to align with our IT strategy. You will report to the DWP Infrastructure Operations Team Lead.

The Day-to-Day:

• Administer SCCM automated software delivery through Software Center along with creating, maintaining, and deploying desktop images.
• Primarily responsible for deploying Windows to desktops, patching Windows to all Windows endpoint devices, and deploying software to all Windows endpoint devices.
• Create documentation for infrastructure and SCCM changes.
• Continuously monitor, maintain, and support our servers using Microsoft and third-party tools, applying performance and security patches and monitoring backups
• Document, implement, and adapt procedures and guidelines.
• Perform Tier II/III troubleshooting of issues on client workstation systems.
• Create and document support processes and knowledge articles using the ServiceNow knowledge base to enhance support efficiency.
• Collaborate with product development teams to ensure products are compliant.
• Monitor endpoint device compliance with configuration management baselines and to improve non-compliant devices.
• Produce compliance reports and analyze data to determine trends and identify gaps to be addressed.
• Be an escalation point for Service Desk and Global User Services technicians, offering expertise and guidance in resolving complex endpoint-related issues.
• Help gather requirements, current state, and future state analysis, including participating in process mapping sessions to improve endpoint management processes.
• Create and deploy Intune configurations, policies, and settings.
• Support and troubleshooting for Windows Autopilot
• Identify, analyze, and resolve system problems with both short-term workarounds and long-term solutions.
• Package software and updates for deployment in the test and production environments.
• Develop security baselines based on the recommendations from the Engineering and Security teams and ensure device policies and remediation are implemented..
• Create reports on device compliance, application deployment, patch management, and software inventory.
• Ensure that device patching is planned, tested thoroughly, and deployed with minimum service disruption while meeting Corporate IT and Cyber Security standards.
• Troubleshoot and resolve SCCM client health issues that prevent patches from automatically installing.
• Monitor workstation patch compliance and manually install patches to meet Corporate IT standards.
• Monitor server patch compliance and manually intervene to install patches during scheduled server maintenance window.
• Develop advanced scripts using PowerShell, Batch or VBScript for both Windows 7 and Windows 10 to automate software removal or mitigate identified vulnerabilities.
• DaaS Engineering and delivery of Service

Your Qualifications:

• 5+ years of experience with SCCM, security patching and providing end-user device support
• Strong governance and security expertise and in managing risks for end-users
• Lean and agile mindset for efficient endpoint management
• Intune experience, supporting software packaging and patching
• Experience of packaging, testing, deployment, and issue remediation
• Experience with Azure Active Directory and Windows Autopilot
• Solid knowledge of PowerShell scripting
• BA/BS in a technical discipline or equivalent experience

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO*, plus 10 paid holidays (*17 days of PTO and 3 days of sick time for California employees)
• Family Support programs including 8 weeks Paid Primary Caregiver leave, adoption assistance and back-up child care
• $10,000 fertility, hormonal health and family-forming benefit
• Opportunity to participate in our hybrid work from home program. This program is subject to change. Based on tenure and performance eligibility, you will have the opportunity to work from home up to 75days per year

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER