Position: Senior Desktop Engineer
Engagement Duration: 12 months (option to extend up to 48 additional months)
Client: California State Teachers' Retirement Systems
Work Location: Perform all work on-site at the CalSTRS headquarters facility in West Sacramento, CA.The proposed project person will be able to adhere to the hybrid working model by working on-site 2-3 days per week at CalSTRS Headquarters, West Sacramento, CA. If no, provide a short explanation. (no points)
The total services period may be up to 12 months, with an option to extend up to 48 additional months, at an estimated average of 160 work hours per month at the rate negotiated at contract execution.

Minimum Technical Qualifications

1. At least five (5) years of hands-on experience with IT infrastructure design, build, deploy, and support, focusing on desktop, laptop and peripherals management.
2. At least five (5) years of experience with design, build, deploy, and management of Desktop as a Service (DaaS) such as AWS Workspace or Windows 365 (Cloud PC).
3. At least five (5) years of experience with automation and scripting using PowerShell or Python to automate deployments and system builds.
4. At least seven (7) years of experience performing device management utilizing enterprise management suites like Microsoft Intune, SCCM (MECM) and JAMF.
5. At least ten (10) years of experience providing operational support, maintenance, patching, provisioning, software packaging, deployment, monitoring, and incident resolution for Windows and macOS devices and peripherals.

Desirable Technical Qualifications

1. One or more of the following or related certifications:

• Microsoft Windows Server Administrator
• Microsoft 365 Endpoint Administrator
• Microsoft Modern Desktop Administrator

2. Experience providing consulting services to State and/or Federal agencies in the USA.
3. Experience implementing endpoint security including BitLocker, Microsoft Defender, etc.
4. Experience migrating Active Directory (AD) group policy objects (GPO) to MS Intune policies.
5. Experience managing and supporting devices running Windows 11 24H2 or higher and macOS 15 (Sequoia) or higher.

Services to be provided include, but are not limited to, the following:

1.Endpoint Infrastructure Planning

1. Develop the target state for the endpoint environment including roadmaps for OS migration, tools transition and process enhancements.
2. Establish enterprise-wide technical standards for endpoint workstations to ensure uniform user experience and simplified management.
3. Evaluate foundational technologies and security frameworks to support future-state endpoint management.
4. Design Desktop as a Service (DaaS) solution to meet various persona profiles including determining between persistent and non-persistent desktops.
5. Conduct risk assessment on new technologies and ensure endpoint solutions meet security policies and standards.

2.Endpoint Infrastructure Development

1. Collaborate with security teams to incorporate security requirements into endpoint environment and OS images.
2. Create and enforce policies in MS Intune and JAMF configuration profiles that define system behavior and compliance across the organization.
3. Review the baseline endpoint architecture for all endpoints ensuring consistency across physical, virtual and mobile platforms.
4. Design the deployment and management processes for tools like MS Intune and JAMF for automated device provisioning.
5. Establish scripting frameworks and develop scripts to automate repetitive tasks and large-scale software distribution.

3.Endpoint Maintenance and Support

1. Provision, configure, maintain, upgrade and support endpoint operating systems, software, and hardware.
2. Perform software packaging, test and deploy to endpoints on premises as well as remote locations.

3. Monitor endpoint infrastructure performance, availability, reliability and security.
4. Troubleshoot and resolve endpoint incidents and service disruptions. Fulfill service requests timely.
5. Perform routine endpoint patching, updates, and vulnerability remediation in accordance with CalSTRS security and change management policies.
6. Assist with disaster recovery planning, documentation, and testing efforts.

4.Documentation and Knowledge Transfer

1. Create, update, and maintain technical documentation, including architecture blueprints, detailed infrastructure design, system diagrams, configuration documentation, and standard operating procedures.
2. Provide knowledge transfer and technical guidance to CalSTRS staff as requested.

5.Operational Support and Collaboration

1. Provide endpoint support, including incident, problem, and change management activities.
2. Collaborate effectively with CalSTRS staff, vendors, and stakeholders.
3. Communicate technical issues, risks, and recommendations clearly and professionally.
4. Adhere to CalSTRS policies, procedures, security standards, and service level expectations.

6.Deliverables

Deliverables may include, but are not limited to:

1. Comprehensive blueprints and roadmaps for desktop environments
2. Detailed technical design documentation and system diagrams.
3. Status reports as requested by CalSTRS.
4. Knowledge transfer materials and operational runbooks.

Transfer of knowledge to appropriate CalSTRS employees is required, along with any requested materials and content for transfer of knowledge.

Completion Criteria
Deliverables/tasks will include all work assignments identified to be completed. Deliverables/tasks are considered complete after CalSTRS' quality assurance process is completed and approval is granted by designated CalSTRS' reviewers.
Performance and timeliness of all deliverables/tasks will be monitored by CalSTRS via the submission of Contractor's weekly status reports and through status meetings. Status and actual hours will be reported by Contractor on a weekly basis for the deliverables/tasks assigned. Each deliverable/task will be tracked via the appropriate program/project schedule and budget in order to monitor progress toward the completion of the deliverables/tasks and milestones.


LOOKING FORWARD TO HEAR FROM YOU.