Principal Desktop Engineering Lead

Requisition Number: 80353

Position Title:

External Description:

Role Summary

The Principal Desktop Engineering Lead is the senior engineering authority within the Workplace Experience Technology organization, accountable for translating End User Compute strategy into secure, stable, and high-performing endpoint and virtual workplace platforms.

Reporting to the Head of Workplace Experience Technology, this role co-owns the evolution of enterprise end-user computing strategy while maintaining direct accountability for engineering standards, platform health, and operational outcomes. The Principal leads a distributed team of approximately 20–25 desktop engineers and technicians, overseeing Windows and macOS platforms, virtual desktop infrastructure (VDI), and modern endpoint management capabilities.

This leader owns outcomes — not just tooling. They are accountable for endpoint security posture, OS lifecycle compliance, deployment reliability, automation maturity (including zero-touch provisioning), and virtual desktop stability across a hybrid workforce. The role establishes engineering discipline, enforces technical standards, and drives modernization efforts that improve resilience, performance, and user experience at scale.

Blending hands-on technical depth with execution-focused leadership, the Principal serves as both a strategic partner to Workplace Experience Technology leadership and the highest technical escalation point for complex endpoint challenges — ensuring that strategy is realized through rigorous engineering, operational excellence, and measurable platform performance.

Responsibilities

• Set the Desktop Engineering Strategy: Define and own the enterprise roadmap for end‑user computing, including OS modernization, cloud‑first endpoint management, automation, and adoption of emerging technologies aligned to business priorities.
• Provide Technical Architecture Leadership: Lead the design and standards for Windows, macOS, VDI, and endpoint management platforms, ensuring consistent configuration, patching, security, and compliance across the fleet.
• Drive Modernization & Automation: Champion initiatives such as Windows 11 upgrades, Intune and Autopilot adoption, zero‑touch provisioning, and self‑service or self‑healing solutions to improve efficiency and user experience.
• Serve as Senior Technical Escalation: Act as the highest‑level escalation point for complex or high‑impact endpoint issues, guiding root‑cause analysis and long‑term remediation to maintain service reliability.
• Lead and Develop the Team: Manage, mentor, and develop a team of ~20–25 engineers and technicians, setting clear priorities, fostering technical excellence, and building a high‑performance, inclusive culture.
• Deliver Major Programs and Projects: Oversee large‑scale desktop initiatives such as OS migrations, hardware refreshes, enterprise software deployments, and new platform rollouts, coordinating across Security, Networking, Cloud, and Service Desk teams.
• Partner with Stakeholders: Act as the primary subject‑matter expert for desktop services, collaborating with IT and business leaders to align solutions with user needs, security requirements, and operational goals.
• Ensure Operational Excellence: Establish KPIs, standard operating procedures, and runbooks; monitor service health, compliance, and incident trends; and manage vendor relationships, budgets, and endpoint asset lifecycles.
• Testing, Validation & Quality Assurance: Own the end‑user computing testing strategy, defining standards for pre‑production, pilot, and production validation across OS, hardware, applications, security, and endpoint changes. Lead UAT and business pilots, validate performance, stability, and security, and ensure regression testing for major releases. Drive defect management and remediation with engineering teams and vendors to maintain a high‑quality, low‑risk desktop environment.

Qualifications

Required:

• Education & Experience: Bachelor’s degree in Information Technology, Computer Science, or equivalent experience, with 10+ years in IT engineering and 5+ years in enterprise desktop or end‑user computing roles, including leadership responsibilities.
• Desktop Platform Expertise: Deep, hands‑on knowledge of Windows and macOS in large enterprise environments, including OS deployment, imaging, troubleshooting, and lifecycle management.
• Endpoint Management Mastery: Expert‑level experience with Microsoft SCCM/MECM and Microsoft Intune, including software distribution, patching, compliance, and co‑management models.
• VDI & Remote Computing: Strong understanding of virtual desktop technologies (e.g., Citrix, VMware Horizon, Azure Virtual Desktop) and their integration with endpoint environments.
• Automation & Scripting: Proven ability to automate endpoint operations using PowerShell, Python, or similar scripting, including support for zero touch‑touch provisioning and configuration management.
• Security & Networking Acumen: Solid understanding of endpoint security best practices (encryption, EDR, identity, hardening) and desktop‑relevant networking concepts (LAN/Wi‑Fi, VPN, DNS/DHCP).
• Leadership & Communication: Demonstrated experience leading enterprise testing strategies, pilot programs, and vendor technical evaluations, including POCs and data‑driven recommendations for platform and tooling decisions.
• Large‑Scale Environment Experience: Leadership experience supporting thousands of endpoints across multiple locations and hybrid work models.
• Modern Endpoint Initiatives: Direct experience with Windows 365 Cloud PC, Autopilot, Intune‑first strategies, or major OS migrations (e.g., Windows 10 to 11).
• Innovation Mindset: A track record of improving end‑user experience through automation, analytics, or modern support models.

Preferred:

• Regulated Industry Background: Experience in financial services or similarly regulated environments with strong compliance and availability requirements.
• Vendor & Financial Management: Experience managing OEMs, software vendors, and service providers, including budgeting, licensing optimization, and contract oversight.

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to three days per week from home.

City:

State:

Community / Marketing Title: Principal Desktop Engineering Lead

Company Profile:

Location_formattedLocationLong: Maryland, US

CountryEEOText_Description: Commitment to Diversity, Equity, and Inclusion: We strive for equity, equality, and opportunity for all associates. When we embrace the power of diversity and create an environment where people can bring their authentic and best selves to work, our firm is stronger, and we create greater value for our clients. Our commitment and inclusive programming aim to lift the experience for each associate and builds allies for our global associate community. We know that a sense of belonging is key not only to your success at the firm, but also to your ability to bring your best each day. Benefits: We invest in our people through a wide range of programs and benefits, including: • Competitive pay and bonuses as well as a generous retirement plan and employee stock purchase plan with matching contributions • Flexible and remote work opportunities • Health care benefits (medical, dental, vision) • Tuition assistance • Wellness programs (fitness reimbursement, Employee Assistance Program) Our policies may change as our working lives evolve. Yet, our commitment to supporting our associates’ well-being and addressing the needs of our clients, business, and communities is unwavering. T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.