Job Title: Senior Infrastructure Engineer
Job Summary
We are seeking a skilled and detail-oriented Senior Employee Technology Configuration Engineer to join our End User Computing (EUC) team supporting a highly regulated financial services environment.
This role is responsible for architecting, configuring, and managing enterprise endpoint platforms across physical and virtual environments, including Microsoft Intune, Virtual Desktop Infrastructure (VDI), and specialized kiosk systems. The engineer will ensure secure, scalable, and compliant device management services while driving automation, operational excellence, and continuous platform optimization.
The ideal candidate brings deep expertise in modern endpoint management, virtual desktop technologies, security compliance, automation and thrives in a high-security, audit-intensive environment.
Key Responsibilities
Design, deploy, and manage enterprise endpoint solutions utilizing Microsoft Intune and Microsoft Endpoint Manager.
Configure and maintain:
Device compliance policies
Configuration profiles
Security baselines
Endpoint protection policies
Manage Windows Autopilot provisioning and device lifecycle processes.
Administer Azure AD / Entra ID integration for authentication and device management.
Monitor endpoint health, compliance status, operational performance, and reporting metrics.
Deploy, maintain, and optimize enterprise applications including:
Win32 applications
Microsoft Store applications
Line-of-Business (LOB) applications
Configure and manage:
Conditional Access policies
Windows Update for Business
Device and user-based configuration policies
Troubleshoot software deployment failures and policy application issues.
Develop deployment standards and configuration baselines to improve platform consistency.
Support enterprise Virtual Desktop Infrastructure environments, including Azure Virtual Desktop (AVD) & VMware Horizon
Manage and maintain VDI golden images, including:
Operating system updates
Application lifecycle management
Performance optimization
Administer and troubleshoot FSLogix profile solutions.
Investigate and resolve:
Session performance issues
Login delays
Profile corruption
Application compatibility issues
Collaborate with infrastructure teams to optimize virtual desktop performance and availability.
Design, deploy, and support single-app and multi-app kiosk solutions.
Configure and maintain:
Assigned Access
Shell Launcher
Auto-login configuration
Endpoint lockdown policies
Develop and maintain PowerShell automation for endpoint and VDI administration.
Implement Intune remediation and proactive remediation solutions.
Automate:
Device provisioning
Application deployment
Policy enforcement
Compliance monitoring
Continuously improve operational efficiency through scripting and process optimization.
Implement enterprise endpoint security controls aligned with corporate and regulatory requirements.
Administer and support:
BitLocker encryption
Microsoft Defender for Endpoint
Endpoint compliance and security reporting
Ensure endpoint environments meet audit, risk, and compliance standards.
Support compliance, risk, and security teams by providing logs, documentation, and audit evidence.
Maintain secure configuration baselines in accordance with enterprise security policies.
Provide advanced L2/L3 support for endpoint, kiosk, and VDI-related issues.
Perform root cause analysis for recurring incidents and service disruptions.
Participate in change management activities related to endpoint platforms.
Work closely with Infrastructure, Security, Application, and Service Management teams to resolve complex issues.
Develop and maintain operational documentation, SOPs, configuration standards, and knowledge articles.
Qualifications
Required Qualifications
5+ years of experience in enterprise endpoint management, EUC, VDI, or workplace technology engineering.
3+ years of hands-on experience administering Microsoft Intune in large-scale enterprise environments.
Strong knowledge of:
Microsoft Intune / Endpoint Manager
Azure AD / Entra ID
Windows 10 and Windows 11 administration
Group Policy (GPO)
Endpoint security controls
Experience supporting enterprise VDI platforms such as Azure Virtual Desktop, VMware Horizon, or Citrix.
Proficiency in PowerShell scripting and automation.
Strong troubleshooting skills related to endpoint management, device provisioning, VDI performance, and application deployment.
Experience supporting compliance and audit requirements within regulated environments.
Preferred Qualifications
Experience with FSLogix profile management and optimization.
Experience with Microsoft Defender for Endpoint.
Knowledge of hybrid cloud endpoint management architectures.
Familiarity with Zero Trust security principles and Conditional Access policies.
Experience supporting kiosk or shared device environments.
ITIL certification or practical experience with Incident, Problem, and Change Management processes.
Relevant Microsoft certifications such as:
Microsoft Certified: Endpoint Administrator Associate
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Modern Desktop Administrator
Morningstar is an equal opportunity employer.
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
R11_DBRSRatingsGmbHIndia DBRS Ratings GmbH, Branch India Legal Entity