Senior System Engineer

Position OverviewMake sure to read the full description below, and please apply immediately if you are confident you meet all the requirements.Our non-profit healthcare client is seeking a Senior Systems Engineer to join its IT organization. This role is responsible for engineering, automation, lifecycle management, and continuous improvement of the organization's endpoint and digital workplace technology environment.The position has a strong focus on endpoint engineering and modern workplace technologies, including Windows, Microsoft Intune, Microsoft Entra ID, Azure Virtual Desktop (AVD), Microsoft 365, software deployment, patching, and device lifecycle management.Supporting an environment of 1,000+ endpoint devices, this individual will serve as a senior technical resource for complex endpoint, systems, device management, and virtual desktop issues. The role also requires a practical understanding of infrastructure dependencies, including Windows Server, networking, DNS, DHCP, VPN, firewalls, applications, databases, and identity services.Key ResponsibilitiesDesign, implement, and maintain enterprise endpoint management solutions using Microsoft Intune, Microsoft Entra ID, Azure Virtual Desktop, and Microsoft 365Develop and maintain endpoint standards, configuration baselines, images, and device lifecycle processes.Lead initiatives involving endpoint modernization, Windows upgrades, virtual desktop optimization, and device standardization.Develop automation and scripting solutions using PowerShell, Python, or similar technologies to streamline endpoint administration.Automate software deployments, patching, provisioning, onboarding, offboarding, and routine support functions.Partner with ServiceNow and IT leadership to automate operational workflows and reduce manual processes.Ensure timely deployment of operating system, third-party application, and security patches.Support troubleshooting of infrastructure and cloud dependencies including authentication, DNS, DHCP, file services, print services, remote access, and application connectivity.Troubleshoot application and database connectivity issues, including server dependencies, service accounts, connection strings, permissions, and network communication paths.Support digital workplace technologies including Microsoft 365, Teams Rooms, collaboration platforms, mobile computing, and remote access technologiesServe as a Tier III escalation point for complex endpoint, operating system, application, and virtual desktop issues.Develop self-service solutions, technical documentation, runbooks, knowledge articles, and support procedures.Mentor support analysts and other IT staff on endpoint engineering best practices.Lead endpoint-focused projects and collaborate with infrastructure, cybersecurity, application, and managed service provider teams.Support endpoint technologies utilized in healthcare and clinical environments while maintaining security, compliance, and operational continuity.What We're Looking For5+ years of progressive experience in endpoint engineering, desktop engineering, workplace technology, or infrastructure operations.3+ years of experience administering enterprise endpoint management platforms.Strong experience with Microsoft Intune, including configuration profiles, compliance policies, application deployment, Windows Autopilot, and device lifecycle management.Experience with Microsoft Entra ID, including identity, groups, devices, and conditional access concepts.Strong experience with Windows 10/11 Enterprise deployment, configuration, troubleshooting, patching, imaging, and lifecycle management.Experience administering or supporting Azure Virtual Desktop (AVD), including host pools, user profiles, and remote desktop performance.Experience with enterprise software deployment, patch management, endpoint security, and mobile device management.Strong scripting and automation experience using PowerShell, Python, or similar technologiesExperience with ServiceNow or another IT Service Management platform, including incident, request, change, asset, and knowledge management workflows.Working knowledge of Windows Server, Active Directory-related services, DNS, DHCP, TCP/IP, routing, firewalls, VPN, and remote access technologiesAbility to troubleshoot issues across endpoints, applications, servers, databases, networks, and identity services.Strong documentation, communication, problem-solving, and root-cause analysis skills.Experience working within ITIL/IT Service Management environments.Healthcare or other regulated-industry experience is preferred.Preferred SkillsAzure infrastructure services, including virtual machines, networking, storage, monitoring, and identity integration.Microsoft Power Platform and low-code workflow automation.Python or other automation languages.Endpoint analytics, monitoring, vulnerability management, and configuration compliance tools.Basic SQL Server and database connectivity knowledge.Experience supporting healthcare, nonprofit, or other regulated environments.CertificationsThe following certifications are preferred/required based on experience:Microsoft Certified: Endpoint Administrator Associate or equivalentMicrosoft Certified: Azure Administrator Associate or equivalentITIL Foundation certification or demonstrated experience working within ITIL-aligned practicesMicrosoft 365 Administrator Expert is a plusMicrosoft security, networking, cybersecurity, or Windows Server certifications are a plusIdeal BackgroundThe ideal candidate is not simply a senior desktop support technician. This is an engineering-focused role for someone who has progressed from traditional desktop/support responsibilities into enterprise endpoint engineering, automation, systems administration, and digital workplace technologiesThe strongest candidates will be hands-on with Intune, Entra ID, AVD, Windows 10/11, Microsoft 365, endpoint automation, and ServiceNow, while also possessing enough infrastructure knowledge to understand how endpoints interact with servers, applications, databases, identity systems, and networks.This individual should be comfortable serving as a Tier III escalation resource, taking ownership of complex technical problems, identifying root causes, automating repetitive processes, improving standards, and partnering across infrastructure, cybersecurity, applications, and support teams.Compensation & Employment StructureThis is a Contract-to-Hire opportunity. The position will initially be engaged on a contract basis with the intention of converting to a permanent employee.Work Arrangement: On-site in Tarrytown, NYPermanent Salary Upon Conversion:$80,000–$90,000 annually, depending on experience and qualifications.By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Benchmark IT, LLC and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. xhyhwjd You can reply STOP to cancel and HELP for help. You can access our privacy policy here: