VP, Desktop Engineering Leader (L12)
Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry's most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.
The Desktop Engineering function is accountable for engineering, automating, and securing Synchrony's end-user compute platforms across Windows, macOS, ChromeOS, and Virtual Desktop environments (e.g., Citrix /Horizon / AWS WorkSpaces / Cloud PC). The team drives modern endpoint management using Microsoft Intune, Autopilot, and co-management (SCCM), with strong ownership of software packaging, patch orchestration, OS lifecycle management, endpoint configuration standards, and performance telemetry.
We are seeking a Desktop Engineering Leader to own and modernize Synchrony's global endpoint ecosystem across physical and virtual platforms. This leader will partner closely with Risk & Compliance to support audits, ensure configuration compliance, and remediate vulnerabilities, while collaborating with Desktop Operations/ECC teams to enable scalable, reliable day-to-day delivery and support.
Key Responsibilities:
- Lead engineering design, development, standardization, and lifecycle management for Windows, macOS, and ChromeOS endpoints.
- Engineer and maintain enterprise OS images (Windows/macOS) and govern ChromeOS management and update strategy.
- Define and maintain hardware standards, perform OEM model testing, and manage drivers/BIOS/firmware update processes.
- Develop and optimize configuration baselines, performance settings, and endpoint hardening standards across platforms.
- Design and manage Intune policies for configuration, application deployment, compliance, and security baselines.
- Lead Windows Autopilot workflows including device registration, profile assignment, join models (Hybrid/Azure AD), validation, and reset/reprovisioning processes.
- Support SCCM infrastructure for co-management scenarios, packaging, patching, and deployment pipelines.
- Drive strategy/roadmap across endpoint tooling including Intune, SCCM, Ivanti, Tanium, JAMF, and Google Admin Console.
- Optimize performance, patching, and application compatibility for VDI/DaaS platforms (e.g., Citrix Cloud, AWS WorkSpaces, AppStream, Cloud PC).
- Support specialized VDI requirements (M365 Products & Services on Citrix).
- Act as the Desktop Engineering POC for audit readiness, evidence collection, technical controls validation, and remediation tracking.
- Implement and maintain endpoint security controls (e.g., Defender, ASR rules, BitLocker), and align configurations with relevant regulatory expectations (e.g., SOX/PCI).
- Manage macOS EFI/firmware/device password standards and coordinate JAMF integrations where required.
- Improve endpoint performance and user experience through Nexthink/telemetry insights and targeted remediation.
- Partner with Desktop Operations/ECC teams to transition engineered solutions into scalable production deployment and support.
- Lead root cause analysis for systemic endpoint issues and drive durable corrective actions.
- Evaluate new tools and modernization opportunities (e.g., Autopilot/Intune enhancements, Nexthink, Tanium, updated security baselines).
Qualifications/Requirements:
- 10 + years in Desktop Engineering, Modern Endpoint Management, or OS Platform Engineering or 12+ years of experience in lieu of a degree.
- Deep expertise in Windows 10/11 engineering (imaging, driver management, BIOS/firmware, GPO/Intune policy design).
- Strong experience with Intune, Autopilot, compliance policies, conditional access, and Azure AD join models / co-management architecture.
- Proficiency in macOS engineering, including update governance, security controls, hardware baseline validation, and JAMF integration.
- Experience with ChromeOS management (automated enrollment, OU-based policy management, update governance).
- Familiarity with endpoint security tooling and controls (e.g., Defender, ASR, BitLocker).
- Knowledge of audit/control expectations as applied to endpoints (e.g., SOX, PCI, configuration compliance).
- Strong cross-functional collaboration (Operations, Security, Risk, Cloud, Network).
- Excellent documentation and communication skills; ability to lead RCA and corrective action programs.
- Broad hands-on/architectural experience across Windows, macOS, ChromeOS, SCCM, Intune, JAMF, Citrix/VDI.
Desired Characteristics:
- Experience leading Cloud PC / DaaS programs and VDI modernization/migration initiatives.
- Track record delivering large-scale endpoint lifecycle modernization (e.g., Autopilot adoption, OS lifecycle planning).
- Cloud identity and access experience (Azure AD, Conditional Access, integrations).
- Automation and scripting expertise (PowerShell, Python).
Work Timings: 3PM to 12 AM IST
This role qualifies for Enhanced Flexibility offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally).This window is for meetings with India and US teams.The remaining hours will be flexible for the employee to choose.Exceptions may apply periodically due to business needs)We are proud to offer flexibility at Synchrony.
Our way of working allows you the option to work from home or workspaces in our Regional Engagement Hubs—Hyderabad, Bengaluru, Pune, Kolkata, or Delhi/NCR.Occasionally you may be required to commute or travel to Hyderabad or one of the Regional Engagement Hubs for in person engagement activities such as business or team meetings, trainings, and culture events.
For Internal Applicants :
- Understand the criteria or mandatory skills required for the role, before applying
- Inform your manager and HRM before applying for any role on Workday
- Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format)
- Must not be any corrective action plan (Formal/Final Formal)
- L10+ Employees who have completed 18 months in the organization and 12 months in their current role and level are only eligible.
- Employees at L10+ can only apply for this opportunity.
Grade/Level: 12
Job Family Group: Information Technology
VP, Desktop Engineering Leader (L12)
Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry's most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.
The Desktop Engineering function is accountable for engineering, automating, and securing Synchrony's end-user compute platforms across Windows, macOS, ChromeOS, and Virtual Desktop environments (e.g., Citrix /Horizon / AWS WorkSpaces / Cloud PC). The team drives modern endpoint management using Microsoft Intune, Autopilot, and co-management (SCCM), with strong ownership of software packaging, patch orchestration, OS lifecycle management, endpoint configuration standards, and performance telemetry.
We are seeking a Desktop Engineering Leader to own and modernize Synchrony's global endpoint ecosystem across physical and virtual platforms. This leader will partner closely with Risk & Compliance to support audits, ensure configuration compliance, and remediate vulnerabilities, while collaborating with Desktop Operations/ECC teams to enable scalable, reliable day-to-day delivery and support.
Key Responsibilities:
- Lead engineering design, development, standardization, and lifecycle management for Windows, macOS, and ChromeOS endpoints.
- Engineer and maintain enterprise OS images (Windows/macOS) and govern ChromeOS management and update strategy.
- Define and maintain hardware standards, perform OEM model testing, and manage drivers/BIOS/firmware update processes.
- Develop and optimize configuration baselines, performance settings, and endpoint hardening standards across platforms.
- Design and manage Intune policies for configuration, application deployment, compliance, and security baselines.
- Lead Windows Autopilot workflows including device registration, profile assignment, join models (Hybrid/Azure AD), validation, and reset/reprovisioning processes.
- Support SCCM infrastructure for co-management scenarios, packaging, patching, and deployment pipelines.
- Drive strategy/roadmap across endpoint tooling including Intune, SCCM, Ivanti, Tanium, JAMF, and Google Admin Console.
- Optimize performance, patching, and application compatibility for VDI/DaaS platforms (e.g., Citrix Cloud, AWS WorkSpaces, AppStream, Cloud PC).
- Support specialized VDI requirements (M365 Products & Services on Citrix).
- Act as the Desktop Engineering POC for audit readiness, evidence collection, technical controls validation, and remediation tracking.
- Implement and maintain endpoint security controls (e.g., Defender, ASR rules, BitLocker), and align configurations with relevant regulatory expectations (e.g., SOX/PCI).
- Manage macOS EFI/firmware/device password standards and coordinate JAMF integrations where required.
- Improve endpoint performance and user experience through Nexthink/telemetry insights and targeted remediation.
- Partner with Desktop Operations/ECC teams to transition engineered solutions into scalable production deployment and support.
- Lead root cause analysis for systemic endpoint issues and drive durable corrective actions.
- Evaluate new tools and modernization opportunities (e.g., Autopilot/Intune enhancements, Nexthink, Tanium, updated security baselines).
Qualifications/Requirements:
- 10 + years in Desktop Engineering, Modern Endpoint Management, or OS Platform Engineering or 12+ years of experience in lieu of a degree.
- Deep expertise in Windows 10/11 engineering (imaging, driver management, BIOS/firmware, GPO/Intune policy design).
- Strong experience with Intune, Autopilot, compliance policies, conditional access, and Azure AD join models / co-management architecture.
- Proficiency in macOS engineering, including update governance, security controls, hardware baseline validation, and JAMF integration.
- Experience with ChromeOS management (automated enrollment, OU-based policy management, update governance).
- Familiarity with endpoint security tooling and controls (e.g., Defender, ASR, BitLocker).
- Knowledge of audit/control expectations as applied to endpoints (e.g., SOX, PCI, configuration compliance).
- Strong cross-functional collaboration (Operations, Security, Risk, Cloud, Network).
- Excellent documentation and communication skills; ability to lead RCA and corrective action programs.
- Broad hands-on/architectural experience across Windows, macOS, ChromeOS, SCCM, Intune, JAMF, Citrix/VDI.
Desired Characteristics:
- Experience leading Cloud PC / DaaS programs and VDI modernization/migration initiatives.
- Track record delivering large-scale endpoint lifecycle modernization (e.g., Autopilot adoption, OS lifecycle planning).
- Cloud identity and access experience (Azure AD, Conditional Access, integrations).
- Automation and scripting expertise (PowerShell, Python).
Work Timings: 3PM to 12 AM IST
This role qualifies for Enhanced Flexibility offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally).This window is for meetings with India and US teams.The remaining hours will be flexible for the employee to choose.Exceptions may apply periodically due to business needs)We are proud to offer flexibility at Synchrony.
Our way of working allows you the option to work from home or workspaces in our Regional Engagement Hubs—Hyderabad, Bengaluru, Pune, Kolkata, or Delhi/NCR.Occasionally you may be required to commute or travel to Hyderabad or one of the Regional Engagement Hubs for in person engagement activities such as business or team meetings, trainings, and culture events.
For Internal Applicants :
- Understand the criteria or mandatory skills required for the role, before applying
- Inform your manager and HRM before applying for any role on Workday
- Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format)
- Must not be any corrective action plan (Formal/Final Formal)
- L10+ Employees who have completed 18 months in the organization and 12 months in their current role and level are only eligible.
- Employees at L10+ can only apply for this opportunity.
Grade/Level: 12
Job Family Group: Information Technology
