Manager, Modern Workplace Engineering

This is a fully remote position, open to applicants in Washington.

📋 Description

• Lead and manage the team responsible for the design, support, security, and modernization of the firm's End-User Computing environment.

• Supervise the configuration, provisioning, operation, and lifecycle management of desktops, laptops, mobile devices, and virtual desktop environments.

• Oversee Microsoft Intune, Windows Autopilot, SCCM/MECM, Group Policy, Ivanti Environment Manager, and associated management and reporting tools.

• Direct endpoint hardware standards, refresh planning, device replacement, secure retirement, inventory governance, and lifecycle forecasting.

• Create monitoring, telemetry, reporting, service-level indicators, and KPIs for endpoint health, compliance, inventory, reliability, and user experience.

• Own and implement the endpoint technology roadmap and guide the shift towards cloud-native modern management.

• Establish management architecture, governance, RBAC, enrollment, configuration, compliance, update, application delivery, and reporting standards for Windows, macOS, iOS, and Android.

• Promote cloud-based provisioning, zero-touch deployment, and direct-ship deployment models while ensuring coexistence and rollback strategies.

• Enhance team proficiency through training, knowledge transfer, documentation, and practical ownership.

• Manage application packaging, compatibility testing, integration, software deployment, version control, and lifecycle management.

• Oversee operating system, Microsoft application, and third-party update and patch cycles.

• Collaborate with Security and Identity Services on endpoint hardening, vulnerability remediation, encryption, Microsoft Defender, device compliance, Conditional Access, Application Protection Policies, device trust, and Zero Trust controls.

• Monitor and correct endpoint non-compliance, configuration drift, application control exceptions, and security findings.

• Manage virtual desktop services, including VMware Horizon and Azure Virtual Desktop or successor platforms.

• Supervise user profiles, personalization, application control, and user environment technologies.

• Assess and implement emerging capabilities in endpoint, virtualization, mobility, Cloud PC, and modern workplace technologies.

• Provide guidance, mentorship, technical leadership, and performance management to five Endpoint Engineers.

• Conduct one-on-ones, set goals, plan skills development, hire, perform reviews, plan succession, cross-train, and coach careers.

• Prioritize tasks across operational support, projects, security remediation, modernization, and technical debt reduction.

• Collaborate with Security, Networking, Infrastructure, Messaging, Identity Services, Digital Collaboration, Service Desk, Application Services, Information Governance, and project teams.

• Act as the senior escalation point for endpoint incidents, systemic issues, security events, and technical decisions.

• Establish standard operating procedures, architecture records, configuration baselines, deployment workflows, support documentation, inventories, service ownership, and escalation paths.

• Champion automation-first engineering using PowerShell, APIs, orchestration, and workflow tools.

• Report on service health, risk, capacity, roadmap progress, project status, and modernization outcomes to IT leadership and stakeholders.

• Engage in IT budgeting and multi-year planning.

• Manage vendor relationships related to endpoints.

• Lead or sponsor endpoint projects, business cases, resources, dependencies, risks, and stakeholder communications.

• Track team capacity and resource utilization and recommend investments.

⛳️ Requirements

• Bachelor's Degree.

• 8+ years of experience in enterprise endpoint engineering, end-user computing, modern workplace, device management, or a closely related field within a medium-to-large enterprise environment.

• 5+ years of technical leadership experience with responsibility for endpoint engineering services, production platforms, projects, roadmaps, and operational outcomes.

• 3+ years of direct people-management experience, including hiring, coaching, performance management, skills development, succession planning, and leading teams that support a 24/7 customer base.

• Proven experience leading or significantly contributing to an enterprise transition from traditional endpoint management to cloud-native modern management.

• Advanced production experience with Microsoft Intune.

• Strong experience in designing, implementing, or operating Windows Autopilot provisioning.

• Extensive experience in supporting hybrid and cloud-managed endpoint environments using Microsoft Intune along with SCCM/MECM.

• Profound knowledge of Windows endpoint engineering, Windows 11, Microsoft 365 Apps, software packaging, application compatibility, software deployment, Windows Update, third-party patching, endpoint telemetry, encryption, and system hardening.

• Experience with Microsoft Entra ID device identities and Conditional Access, device compliance, device trust, MFA, Application Protection Policies, and Zero Trust-aligned controls.

• Experience in managing mobile devices and applications across iOS and Android, including enrollment, configuration, compliance, MDM, and MAM or application protection capabilities.

• Experience in overseeing virtual desktop environments and image lifecycles, such as VMware Horizon, Azure Virtual Desktop, Citrix, Windows 365, or similar enterprise platforms.

• Experience with user profile management, user environment management, application control, personalization, Group Policy, and migration of legacy controls to modern cloud-based alternatives.

• Proficiency with PowerShell and experience utilizing APIs, automation, orchestration, or workflow tools.

• Experience in developing endpoint technology roadmaps, architecture standards, operating procedures, service metrics, budgets, vendor strategies, business cases, and project plans.

• Strong organizational and project leadership abilities.

• Excellent written, verbal, customer interaction, and stakeholder management skills.

• Experience managing macOS through Microsoft Intune or another enterprise Apple management platform, including enrollment, configuration, compliance, patching, application delivery, and Apple Business Manager integration.

• Microsoft certifications in Endpoint Administration, Identity and Access, Security, Microsoft 365, Azure, or related modern workplace disciplines; ITIL or equivalent service-management training is preferred.

• Experience working in a law firm, professional services organization, regulated environment, or a highly client-service-oriented enterprise.

🏝️ Benefits

• Choice of health and vision insurance plans.

• 2 paid volunteer days for qualifying community service work.

• Dental plan.

• Fertility and adoption benefit.

• Paid sabbatical after 13 years of service.

• Tuition reimbursement.

• Commuter benefits.

• Retirement contribution.

• Bonus eligibility for full-time employees.

• Health insurance with optional HSA.

• Long term disability.

• Dental insurance.

• Vision care.

• Telemedicine and virtual short-term counseling services.

• Life insurance.

• Healthcare and Dependent Care Flexible Spending Accounts.

• Subsidized backup care and caregiving resources.

• 401(k).

• Vacation.

• Sick time.

• 11 paid holidays each year.

• Employee assistance program.

• Initial vacation benefit of 15 days per year.

• 11 days of sick leave per year, accrued bi-weekly.

• Voluntary accident insurance.

• Voluntary life insurance.

• Voluntary disability insurance.

• Voluntary long-term care insurance.

• Pet insurance.

• Commuter and Transit programs.