Digital Workplace Operations Engineer

It's an exciting time to join Fisher Investments; we're continuing to invest in the future of our firm's technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled global team that inspires future scale through strategic solutions, innovation, mentoring, and tight knit teamwork. We help support our firm's diverse businesses, and we are excited to continue solidifying that foundation as we add more accomplished technologists to our Infrastructure & Operations Team.

The Opportunity:

The Digital Workplace Endpoint Management Operations Engineer (Endpoint Compliance & Remediation, Intune, and Application Packager) ensures efficient and effective operational support for endpoint management and application deployments across our global organization. You will oversee various aspects of device management, including software packaging, operating system deployment, patch management, and support security compliance of the deployments. You will work closely with different teams to collaborate on deployment needs, and implement process improvements to align with our IT strategy. There are 100+ applications in our environment and you would be responsible for installing, packaging, and testing these applications for deployment on top of the base image in Windows 10. Additionally, you will also be responsible for ongoing support of SCCM with biweekly and monthly patching. You will help create standard images, updates to the image, and operating system upgrades. You will also plan, create, deploy, and monitor SCCM packages and OSD task sequences to devices on the network. You will deploy monthly Microsoft security updates using SCCM and maintain compliancy of all networked systems. The Digital Workplace Operations Engineer will report to the Digital Workplace Infrastructure Operations Team Lead.

The Day-to-Day:

• Administer SCCM automated software delivery via Software Center along with creating, maintaining, and deploying desktop images
• Primarily responsible for deploying Windows to desktops, patching Windows to all Windows endpoint devices, and deploying software to all Windows endpoint devices
• Continuously monitor, maintain, and support our servers using Microsoft and third-party tools, applying performance and security patches and monitoring backups
• Perform Tier II/III troubleshooting of issues on client workstation systems
• Be an escalation point for Service Desk and Global User Services technicians, offering expertise and guidance in resolving complex endpoint-related issues
• Create and document support processes and knowledge articles using the ServiceNow knowledge base to enhance support efficiency
• Collaborate with product development teams to ensure products are compliant
• Validate success of deployment solutions and communicate updates to senior management
• Monitor endpoint device compliance with configuration management baselines and remediate non-compliant devices
• Help gather requirements, current state, and future state analysis, including participating in process mapping sessions to improve endpoint management processes
• Create and deploy Intune configurations, policies, and settings
• Manage and maintain Windows 10 & 11 workstation baseline configurations
• Support and troubleshooting for Windows Autopilot
• Package software and updates for deployment in the test and production environments.
• Develop security baselines based on the recommendations from the Engineering and Security teams
• Create reports on device compliance, application deployment, patch management, and software inventory
• Ensure that device patching is planned, tested thoroughly, and deployed with minimum service disruption while meeting Corporate IT and Cyber Security standards
• Troubleshoot and resolve SCCM client health issues that prevent patches from automatically installing
• Monitor server patch compliance and manually intervene to install patches during scheduled server maintenance window
• Develop advanced scripts using PowerShell, Batch or VBScript for both Windows 7 and Windows 10 to automate systems administration tasks, software removal and mitigate identified vulnerabilities
• DaaS Engineering and delivery of Service

Your Qualifications:

• 5+ years' experience with SCCM and security patching
• 5+ years' experience providing end-user device support in an enterprise environment
• 3+ years' experience with ServiceNow ITSM
• 3+ years' experience with Intune to support software packaging and patching
• 2+ years' experience with Windows Autopilot
• Experience in an Agile/Scrum environment
• Expert knowledge of packaging, testing, deployment, and issue remediation
• Strong governance and security expertise in managing risks for end-users
• Solid knowledge of PowerShell scripting
• Solid understanding of Azure Active Directory
• Bachelor's degree in a technical discipline or equivalent experience

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO*, plus 10 paid holidays (*17 days of PTO and 3 days of sick time for California employees)
• Family Support programs including 8 weeks Paid Primary Caregiver leave, adoption assistance and back-up child care
• Opportunity to participate in our hybrid work from home test. This program is a pilot test and subject to change. Based on tenure and performance eligibility, you will have the opportunity to work from home up to 100 days per year

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER