Senior Endpoint Engineer

Our client, an Am Law 100 law firm, is seeking a Senior Endpoint Engineer to help design, build, and support its global endpoint ecosystem. Reporting to the Senior Manager of Endpoint Systems Engineering, this role serves as a hands-on technical authority responsible for delivering secure, compliant, and high-performing digital workspaces across a modern enterprise environment.

This position plays a key role in endpoint architecture, automation, application delivery, and security — supporting the firm's ISO 27001 compliance posture, zero-trust strategy, and ongoing digital transformation initiatives .

What You'll Do

• Design and engineer endpoint solutions across Windows, iOS, Android, and VDI environments
• Build and maintain standardized endpoint images using Intune, Windows Autopilot, and MDT
• Automate application deployment, patching, and updates using Intune, MECM, PowerShell, and Windows Update for Business
• Create and manage application packaging frameworks and deployment pipelines
• Configure and manage endpoint security policies, compliance settings, and device enrollment
• Monitor endpoint health and performance using Endpoint Analytics and telemetry tools
• Provide Tier 3 escalation support , root cause analysis, and engineering-level troubleshooting
• Lead endpoint-related initiatives, including refresh cycles, platform upgrades, and modernization efforts
• Collaborate closely with Security, Infrastructure, Desktop Support, and business stakeholders to drive continuous improvement

Core Expertise

Endpoint Management & Deployment
Advanced experience with Microsoft Intune, MECM, Windows Autopilot, and modern device lifecycle management.

Application Packaging & Automation
Strong hands-on expertise with MSIX, WinGet, App-V, PSAppDeployToolkit, Intune Win32 packaging, and PowerShell-based automation.

Operating Systems & Virtualization
Deep knowledge of Windows 10/11, Microsoft 365 Apps, Citrix Virtual Apps & Desktops, Azure Virtual Desktop, and hybrid endpoint environments.

Identity, Security & Telemetry
Experience with Microsoft Entra ID, conditional access, zero-trust security models, Defender for Endpoint, BitLocker, Group Policy, and endpoint analytics.

Advanced Troubleshooting
Expert-level problem solving across Windows internals, drivers, networking, registry, and workstation performance.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or equivalent experience
• Microsoft certifications (Endpoint Administrator Associate, Azure Administrator, Enterprise Administrator Expert, or similar) preferred
• 8+ years in endpoint or systems engineering roles
• 3+ years supporting enterprise Windows 10/11 environments
• 2+ years with modern packaging tools and deployment solutions (Intune, Autopilot, MDT, MSIX, PSAppDeployToolkit)
• Experience supporting regulated or professional services environments required
• Prior legal industry experience is a plus