Senior Desktop Engineer

Davis Polk & Wardwell LLP (including its associated entities) is an elite global law firm with world-class practices across the board. Clients know they can rely on Davis Polk for their most challenging legal and business matters. From offices in the world's key financial centers and political capitals, our more than 1,000 lawyers collaborate seamlessly to deliver exceptional service, sophisticated advice and creative, practical solutions. Visit davispolk.com.

Position Summary

The Senior Desktop Engineer will be heavily client focused leading Level 3 support, administration, and engineering of desktop systems and end-user applications. This role plays a key part in designing, optimizing, and maintaining the desktop ecosystem, ensuring a seamless and efficient user experience.

The ideal candidate is comfortable working directly with end users, troubleshooting complex issues, and collaborating cross-functionally with desktop engineering and support teams. Success in this role requires both hands-on technical expertise and the ability to contribute to strategic improvements in desktop infrastructure and application delivery.

Essential Duties and Responsibilities

Typical responsibilities include, but are not limited to, the following:

• Deployment, tracking, and compliance reporting for all OS, software, and third-party patches.

• Identify bugs and deficiencies in client management tools or processes, come up with remediation plan(s), and successfully implement those plans.

• Application deployment and troubleshooting using MECM; MECM agent and patching troubleshooting.

• Experience with creating SSRS reports for MECM (some knowledge of MS SQL and PowerBI).

• Resolve issues with patching and software deployment through remote management tools.

• Third level Windows desktop/laptop support and administration.

• Microsoft 365 Apps administration – deployment (C2R/ODT), update channel management, Microsoft 365 tenant configuration, and user/license administration via M365 Admin Center and PowerShell.

• Application Packaging - MSI & MSIX/MSIXbundle format using Flexera AdminStudio Tool preferred with experience converting to .intunewin (Win32 App).

• Working with and troubleshooting desktop builds (MECM OSD).

• Experience with Modern Driver Management.

• Participate in standard image development, management, QA testing, and deployment.

• Familiar with MECM hybrid-joined devices & co-management (Configuration, Compliance, Conditional Access, Scripts & Remediations) and Microsoft Intune (MEM/MDM) – device configuration profiles, compliance policies, Conditional Access, application deployment, and Proactive Remediations; experience with Entra ID-joined, hybrid-joined, and co-managed devices.

• Strong skills in Active Directory, DNS, DHCP, GPO, and Microsoft Entra ID (Azure AD); experience with hybrid identity, Conditional Access policies, and MFA/SSPR administration.

• Strong troubleshooting skills with multi-tier application and systems.

• Strong knowledge of PowerShell scripting including automation against Microsoft Graph API and Entra ID; familiarity with scripted Intune remediation and Azure automation runbooks.

• Exposure to Windows server support including virtual machines.

• Experience with Azure Virtual Desktop (AVD) – host pool provisioning, session host image management, FSLogix profile containers, and application delivery; familiarity with AVD scaling plans and monitoring via Azure Monitor.

• Exposure supporting highly mobile users and systems (iOS & iPadOS, Microsoft Intune).

Qualifications/Position Requirements

• Knowledge of Ivanti AppSense tools, Microsoft Entra ID administration (user/group lifecycle, RBAC, PIM), BitLocker with Intune key escrow, and Windows Autopilot deployment including Autopilot Reset and pre-provisioning.

• Exposure to supporting enterprise document management systems (e.g., iManage Work); experience with M365 integrations including SharePoint Online, OneDrive, and Teams administration is a plus.

• Experience with RECAST Application Workspace is a plus but not required.

• Very strong technical skills, attention to detail, and excellent oral and written communication skills.  Strong ability to create and maintain detailed system documentation.  In addition, must be a creative thinker with proven problem-solving ability. Strong interpersonal skills, including demonstrated ability to work in a highly collaborative flat organization.

• Platforms: Strong proficiency in Windows 365, Microsoft Intune, Azure Active Directory (Entra ID), and M365 apps.

• Automation: Demonstrated ability to use PowerShell and Microsoft Graph API for automation.

• Technical Skills: Deep understanding of OS deployment, GPO migration to Intune, and troubleshooting Virtual Desktop Infrastructure (VDI).

Education and/or Experience

• 7+ years in a related field.

• Experience in a professional services organization a plus.

• Bachelor’s degree preferred.

Compensation

The expected base salary for this position is $170,000.00 - $180,000.00. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, anticipated assignment, and, where applicable, licensure or certifications obtained. Market and organizational factors are also considered. Davis Polk offers a competitive salary and comprehensive benefits package.