Workplace Services Engineer

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Senior Workplace Services Desktop Engineer is a technical leader responsible for architecting, engineering, and sustaining end-user computing platforms that enable a secure, efficient, and modern digital workplace. This role focuses on system reliability, endpoint security, automation, and operational excellence across devices, operating systems, and collaboration technologies.

As a senior-level engineer, this position acts as a top-tier escalation point and subject matter expert, partnering closely with Security, Infrastructure, Networking, and Operations teams. The role also plays a key part in guiding offshore/onshore delivery models and influencing technology strategy and standards.

• Technical Leadership & Collaboration
  • Serve as a senior escalation point for complex endpoint and desktop engineering issues
  • Apply systems thinking, detailed diagnostics, and root-cause analysis to resolve high-impact problems
  • Collaborate closely with Infrastructure, Network, Security, and Service Desk teams to ensure cohesive service delivery
  • Participate in change, release, and incident review processes to maintain platform stability
  • Influence and contribute to the endpoint technology roadmap and platform strategy
  • Mentor junior engineers and operational teams to elevate skillsets and delivery quality
• Documentation & Knowledge Management
  • Create and maintain SOPs, runbooks, engineering standards, and architectural documentation
  • Ensure operational documentation is accurate, scalable, and optimized for offshore teams
  • Support knowledge transfer initiatives across onshore/offshore delivery resources
• Endpoint Platform Engineering
  • Design, standardize, and maintain enterprise endpoint platforms including Windows and mobile devices
  • Manage OS deployment, provisioning, and enrollment workflows for modern workplace environments
  • Lead Windows OS lifecycle activities, including feature updates, version migrations, and major upgrades (e.g., Windows 11)
  • Maintain hardware standards including BIOS, firmware, and driver management
  • Ensure endpoint performance, reliability, and user experience at enterprise scale
• Security, Compliance & Vulnerability Management
  • Collaborate with Patch Management and InfoSec teams to remediate endpoint vulnerabilities
  • Implement and manage device compliance policies, secure baselines, and disk encryption standards
  • Support security initiatives by ensuring endpoint configurations align with corporate and regulatory requirements
• Automation & Tooling
  • Develop scripts and automated workflows (PowerShell preferred) to streamline operational tasks
  • Reduce manual processes through automation, AI-driven solutions, and standardization
  • Engineer and support solutions using Microsoft Intune and modern endpoint management platforms
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regard to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

• 5+ years of experience in Endpoint Engineering, Desktop Engineering, or Workplace Services
• Solid hands-on experience with Windows OS lifecycle management at scale
• Experience supporting hybrid and remote workforce environments
• Subject-matter strength with Microsoft Intune and modern management technologies
• Advanced PowerShell scripting and automation capability
• Solid understanding of endpoint security principles and secure configuration baselines

• Experience with SCCM / ConfigMgr
• Experience working within offshore/onshore delivery models.
• Exposure to Tanium or similar endpoint management/security platforms
• Advanced scripting experience (PowerShell, automation frameworks)
• Understanding of ITIL practices for incident, problem, and change manage