Windows Desktop Engineer

Windows Desktop Engineer

Location: Cedar Rapids, IA Onsite

Only USC/GC On W2

Experience: Minimum 7 – 10 Years of Relevant Experience

Job Description

The Windows Desktop Engineer is responsible for designing, implementing, and maintaining secure Windows endpoint configurations across the enterprise. The role focuses on endpoint hardening, Group Policy management, security compliance, configuration governance, and automation of recurring remediation activities. The engineer collaborates closely with infrastructure and cybersecurity teams to reduce vulnerability recurrence and strengthen security controls.

Key Responsibilities

• Develop and maintain enterprise desktop configuration standards.


• Design and implement Group Policy controls and security baselines.


• Manage endpoint hardening initiatives.


• Identify and remediate configuration drift issues.


• Implement policy-based security controls and automated remediation.


• Partner with security teams on compliance and audit initiatives.


• Support enterprise Windows operating system lifecycle management.


• Drive automation to reduce operational support effort.

Required Skillset

Technical Skills

• Windows 10/11 Enterprise Administration


• Group Policy (GPO) Design and Management


• Microsoft Intune


• Microsoft Endpoint Configuration Manager (MECM/SCCM)


• Active Directory


• PowerShell Scripting


• Windows Security Baselines


• Endpoint Hardening and Compliance Frameworks


• Microsoft Defender Suite

Preferred Skills

• CIS Benchmark Implementation


• Azure AD / Entra ID


• Zero Trust Security Models


• Automation and Configuration Management


• Vulnerability Management Tools

Soft Skills

• Strategic thinking


• Process improvement mindset


• Documentation and governance


• Strong stakeholder management