Our client, a global hedge fund, are actively seeking a digital workplace engineer to join their expanding team in Hong Kong. You will help design, build, and continuously improve the Windows-based services used across their firm, with a strong focus on Windows 11, Microsoft Intune, Windows Autopilot, Group Policy, Citrix DaaS, and automation. You will also ensure users experience a secure, consistent, and high-performing environment across both physical and virtual desktops.

The role:

1. Engineer, support, and maintain enterprise Windows 11 environments across physical and virtual platforms
2. Design, manage, and improve Windows Autopilot provisioning and device deployment processes
3. Configure and manage device security, compliance, and software deployment using Microsoft Intune and Group Policy
4. Support and optimise Citrix DaaS, including image management, logon performance, and overall user experience
5. Deliver workspace and user environment solutions, including workspace/profile management and end-user personalisation
6. Develop PowerShell automation for provisioning, application deployment, endpoint health checks, and remediation
7. Own endpoint lifecycle activities end-to-end, from initial provisioning through patching and decommissioning
8. Serve as the regional escalation point for complex or business-critical EUC issues
9. Create reporting covering endpoint health, patching status, BitLocker, and security/compliance adherence
10. Contribute to global endpoint standards and EUC engineering projects
11. Occasional travel to other APAC offices may be required

What you offer:

1. Hands-on enterprise experience with Microsoft Intune and Windows Autopilot
2. Strong experience engineering and supporting enterprise Windows 10/11 environments
3. Advanced PowerShell scripting and automation skills
4. Experience supporting Citrix DaaS, VDI, or an equivalent virtual desktop platform
5. Experience designing and managing Group Policy
6. Experience with workspace management, profile management, and user personalization technologies
7. Solid understanding of Active Directory, Entra ID, authentication, and hybrid identity
8. Experience with endpoint security, patching, and application deployment
9. Strong troubleshooting ability and clear communication skills
10. Ability to work independently within APAC while contributing effectively to a global team
11. Experience with Microsoft 365, PKI, or infrastructure-as-code tooling would be advantageous