Role Definition: IT Engineer

Department: IT Operations / Infrastructure

Reports To: CTO

Role Objective
To act as the primary enabler of workforce productivity. The IT Engineer is
responsible for the entire lifecycle of end-user computing—from the "Day 1"
onboarding experience to the secure retirement of hardware. This role requires
a strict adherence to security protocols (BitLocker, VPN, Access Control),
acting as the hands-on implementer of the standards defined by the Network
and Security departments.

Core Responsibilities & Expectations

1. Workstation Lifecycle & Onboarding (The "Day 1" Guarantee):

Seamless Onboarding: You own the new hire technical experience. You
must ensure that every new employee receives a fully configured, updated,
and ready-to-use machine before their start time. There should be no
"setup time" wasted on their first day.

OS Hardening & Configuration: Responsible for the baseline image of all

workstations (Windows/Mac). You must ensure strictly enforced standards
such as BitLocker encryption, automated screen locks, and disabled guest
accounts are active on every device.

Asset Management: You are the guardian of hardware inventory. You must
maintain an accurate, up-to-the-minute log of who owns which device, its
warranty status, and its physical location.

2. Security & Compliance Implementation:

The Security Liaison: You act as the executor for the Security Department’s
requirements. If Security defines a new policy (e.g., "Block USB drives" or
"Install EDR Agent"), you are responsible for pushing that configuration to
all endpoints via MDM or Group Policy.

Patch Management: Ensure that no device enters the network with an

outdated OS or vulnerable software. You are responsible for automating

Role Definition: IT Engineer 1

 updates so they do not disrupt user productivity.

Access Control: Manage user accounts (Active Directory / Google

Workspace). You must ensure permissions are granted based on the "Least
Privilege" principle and revoked immediately upon employee offboarding.

3. Network Collaboration & Connectivity:

Connectivity Assurance: Work closely with the Network Engineer to

troubleshoot "last mile" issues. While the Network Engineer manages the
firewall/switch, you ensure the client device (Wi-Fi drivers, VPN clients, IP
settings) is correctly configured to talk to the network.

VPN & Remote Access: Configure and test secure remote access tools
(VPN) for all users, ensuring they can connect to business resources
securely from outside the office.

4. Technical Support & Experience:

Tier 2 Resolution: Serve as the escalation point for complex desktop

issues. You are expected to solve root causes (e.g., "Why does this PC
keep crashing?") rather than just applying quick fixes.

Performance Standards
Area Expectation

Onboarding 100% of new hires have their equipment ready and login credentials
Readiness tested before 9:00 AM on their first day.

Security 0% of fleet devices lack BitLocker encryption or critical security

Compliance patches. Audit logs are always up to date.

Asset Inventory database reflects reality with 100% accuracy; no "ghost

Accuracy assets" or lost laptops.

Network and Security teams report that their requirements are

Collaboration implemented on endpoints within agreed SLAs (Service Level
Agreements).

IT Engineer: New Hire Onboarding

Checklist
Employee Name: ___________________
Department: ___________________

Role Definition: IT Engineer 2

 Start Date: ___________________
Device Asset Tag: ___________________

Phase 1: Hardware & OS Preparation (T-Minus 3 Days)

Goal: Ensure the physical asset is ready and the Operating System is clean.

Hardware Inspection: Verify laptop/desktop physical condition (keyboard,

screen, ports). Clean and sanitize if re-issued.

Re-Imaging: Wipe previous data and install the latest approved Corporate
OS Image (Windows 11 Pro / macOS Sonoma).

BIOS/UEFI Security:

Enable Secure Boot.

Set a BIOS Admin Password (to prevent unauthorized booting from

USB).

Driver Updates: Run manufacturer update tools (Dell Command / Lenovo

Vantage / Apple Update) to ensure all firmware is current.

Phase 2: Security Hardening (Mandatory)

Goal: Align with Security Department requirements (Zero Trust).

Drive Encryption (BitLocker / FileVault):

Enable Encryption on the OS drive.

CRITICAL: Escrow/Save the Recovery Key to Active Directory or Cloud

Inventory (NOT locally on the machine).

Account Security:

Create User Account (Standard User - No Local Admin rights unless

approved).

Disable "Guest" Account.

Configure Screen Lock timeout (e.g., 5 minutes).

Endpoint Protection:

Install Antivirus / EDR Agent (e.g., Palo Alto).

Verify the agent is reporting "Healthy" to the central console.

Role Definition: IT Engineer 3

 Phase 3: Network & Connectivity
Goal: Collaboration with Network Engineer to ensure access.

VPN Setup:

Install Corporate VPN Client.

Import configuration profile/certificates.

Test: Connect to VPN using a test account to verify handshake works.

Wi-Fi Profiles: Pre-load the office Wi-Fi SSID and Certificate so the device
connects automatically upon arrival.

MAC Address Whitelisting: (If applicable) Submit device MAC address to

Network Engineer for NAC (Network Access Control) approval.

Phase 4: Software & Licensing

Productivity Suite: Install Office 365 / Google Workspace apps.

Department Specific Tools: (Check with Hiring Manager)

Dev: VS Code, Docker, Git, etc.

Design: Adobe Cloud, Figma, etc.

Browser Standards: Set default browser and install required security

extensions (e.g., Password Manager).

Phase 5: The "Day 1" Handover

Goal: The User Experience.

Login Verification: Log in as the user (initial setup) to build the local profile,
then sign out.

Peripheral Check: Ensure monitor, dock, mouse, and keyboard are at the
desk (or packed for shipping).

Welcome Email: Send an email with initial credentials (temporary

password) and links to IT documentation.

Orientation Session: Schedule 15 minutes with the new hire to:

Demonstrate VPN connection.

Demonstrate Password Manager usage.

Explain how to submit an IT Support Ticket.

Role Definition: IT Engineer 4

 Completed By (IT Engineer Signature): ___________________
Date: ___________________

Role Definition: IT Engineer 5