Hi Matt,
You can explore Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/fundamentals/get-started-with-intune. With Intune you can remotely install applications. It is also very useful in terms of device management. You can push different security policies and apply device restrictions.
You can also check Microsoft Autopilot https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot.
With Microsoft Autopilot you can have all necessary apps preinstalled on the device. When the user first sign-in to his computer, he will automatically have everything preinstalled.
Please let me know if that answers your question.