Senior System Engineer (Desktop Security)

Desktop Security System Engineer position for Top US hedge fund.

You will be a part of Technology Infrastructure Team which operates the foundational technology platforms that

power all of client's applications and businesses. The team focuses on innovation and challenges the current state of our infrastructure

technology in a fast-paced, dynamic, and collaborative working environment.

You will be responsible for implementing and maintaining robust security measures to protect against

threats and vulnerabilities and ensuring seamless integration of these tools into our security

infrastructure.

Specifically, you will:

• Manage and maintain Windows 10 and macOS desktop builds, ensuring consistency and

compliance with company standards

• Design, implement, and optimize build processes for desktop systems, applications, and
• Monitor and troubleshoot desktop build issues, responding to incidents and ensuring timely

resolution

• Develop and maintain documentation for build processes, configurations, and troubleshooting

procedures

• Implement and manage security for Windows and Mac desktops, integrating SCCM, Intune and

JAMF for comprehensive device management and security

• Conduct security assessments and audits, utilizing device management reporting features to

identify vulnerabilities and compliance issues

• Collaborate with Information Security teams to integrate policies and configurations into the

Windows desktop lifecycle

• Develop and enforce security best practices and standards, leveraging SCCM, Intune and JAMF

capabilities for enhanced security management

• Respond to security incidents, investigate and provide/or work on remediation efforts
• Stay updated on the latest security threats and trends, especially those impacting Windows and

Mac environments

• Provide training and support on security awareness and effective device management
• Work with vendors and external agencies to enhance security measures, including the

integration of third-party tools with our management tools

MUST

We are looking for an inquisitive, dynamic, and hands-on individual to join our End User Compute

technology team to help develop an endpoint security strategy.

• Bachelor's degree with a concentration in Technology, Computer Science or related discipline or

commensurate experience

• In-depth Windows 10/11 knowledge,
• Understands and can creates GPOs for Windows 10/11,
• Can troubleshoot performance and application related issue using tools like Systinternals,
• Understands the Windows registry architecture and can create registry fixes
• Understands how to test in environments, with a regression plan
• 3+ years of experience in Windows operating systems, specifically with extensive knowledge of

desktop builds, security and management in SCCM and Intune

• Strong problem-solving, analytical, and communication skills
• Ability to prioritize and lead the team to troubleshoot complex issues across the entire firm,

provide root cause analyses, and make recommendations to mitigate future risk

• Ability to maintain composure and focus in a fast-paced environment
• Ability to encourage diversity of thought across the team and promote collaboration for

potential better outcomes

• Be flexible to work on a broad range of issues, tasks and occasional weekend work/on call

rotation as required

• Commitment to the highest ethical standards

NICE TO HAVE

• Experience working in banking or similar companies
• Experience using Qualys/PatchMyPC in desktop (including virtual) environments
• Experience with JAMF, Active Directory, GPO, WMI, and SSO
• Proficiency in scripting languages such as PowerShell, Bash, or Python
• Hands-on experience with network and endpoint security protocols, cryptography, authentication, authorization, and intrusion detection/prevention systems