Senior Endpoint Engineer

***NY, DC, BOS or ATL ONLY***

Serving as a technical lead and escalation point, this position partners closely with Security, Infrastructure, Desktop Support, and business stakeholders to proactively identify issues, engineer scalable solutions, and continuously improve endpoint reliability, performance, and user experience.

In this capacity, the Senior Endpoint Engineer will:

• Design, develop, and maintain endpoint engineering solutions across Windows, iOS, Android, and VDI (Virtual Desktop Infrastructure) platforms;
• Create, test, and maintain application install packages and wrappers for delivery via Microsoft Intune, MECM (Microsoft Endpoint Configuration Manager), and VDI environments;
• Develop and maintain standard endpoint images for supported device models using Windows Autopilot, Intune, and Microsoft Deployment Toolkit (MDT);
• Automate software deployments, patching, and updates using Intune, PowerShell, and Windows Update for Business;
• Test integrated applications against standard images, software dependencies, hardware models, and production environments;
• Patch desktops, laptops, and virtual desktops in alignment with security baselines and compliance requirements;
• Maintain a centralized software installation and packaging library with version control and documentation;
• Prepare, test, document, and deploy application updates across Firm systems;
• Research, evaluate, and recommend endpoint software and hardware solutions to improve stability, performance, and consistency;
• Manage endpoint security configurations, including Intune enrollment, compliance policies;
• Monitor and report on endpoint health, performance, and compliance using Microsoft Endpoint Analytics, and telemetry tools like ControlUp or NexThink;
• Support hybrid and remote work environments using conditional access, zero-trust principles, and Microsoft Entra ID;
• Serve as a Tier 3 escalation point for the IT Support Center, providing end-to-end incident resolution and root cause analysis;
• Analyze systemic issues, identify root causes, and implement corrective and preventative actions;
• Act as a technical lead on endpoint-related projects, providing task-level guidance and engineering leadership;
• Execute endpoint refresh initiatives, platform upgrades, and modernization efforts;
• Interface directly with vendors and internal IT teams to resolve complex or unique technical issues;
• Stay current on Firm application functionality, endpoint technologies, and industry best practices;
• Participate in an on-call rotation to support global incident management processes; and
• Support endpoint changes during approved maintenance windows; limited after-hours work may be required.

Proficiencies:

• Endpoint Management & Deployment

Advanced hands-on experience with Microsoft Intune, Windows Autopilot, and Microsoft Endpoint Configuration Manager (MECM). Strong expertise in modern endpoint deployment models, zero-touch provisioning, and lifecycle management;

• Application Packaging & Automation

Expertise in application packaging and virtualization technologies including MSIX (Microsoft Installer XML), WinGet, App-V, PSAppDeployToolkit, and Intune Win32 packaging. Strong automation skills using PowerShell, Azure DevOps, and scripting frameworks to streamline deployments and updates;

• Operating Systems & Platforms

Deep technical knowledge of Windows 10/11, Microsoft 365 Apps (Teams, OneDrive), Citrix Virtual Apps and Desktops, Azure Virtual Desktop, and hybrid endpoint environments;

• Identity, Security & Telemetry

Strong understanding of Microsoft Entra ID, conditional access, zero-trust security models, Group Policy, endpoint protection (Defender for Endpoint, BitLocker, third-party EDR), and endpoint analytics. Skilled in using telemetry to monitor health, detect trends, and drive proactive remediation; and

• Systems & Troubleshooting

Advanced troubleshooting skills across Windows internals, registry, DLL conflicts, drivers, network connectivity, workstation remote control tools, and endpoint performance analysis.

Qualifications:

• Bachelor s Degree in Information Systems, Computer Science, or equivalent experience;
• Microsoft certifications, such as Endpoint Administrator Associate, Enterprise Administrator Expert, Identify and Access Administrator, Azure Administrator or similar;
• 8+ years of experience in endpoint engineering or systems engineering roles;
• 3+ years lead supporting Windows 10/11 enterprise endpoint environments;
• 2+ years with modern software packaging tools (Intune, MSIX, PSAppDeployToolkit);
• 2+ years with modern imaging and deployment solutions (Intune, Autopilot, MDT);
• Experience supporting security frameworks, compliance requirements, and audit activities in regulated or professional services environments preferred; and
• Prefer previous work experience in a Legal company, though not required.

Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.