Senior Endpoint Engineer
Location: Remote (U.S.-based)
Geographic Hiring Preference: New York, Washington D.C., Boston, Atlanta
Reporting Line: Senior Manager, Endpoint Systems Engineering
Direct Reports: None
Visa Sponsorship: Not available
Compensation by Location
New York / Boston: $116,000 – $150,000
Washington D.C.: $108,600 – $141,000
Atlanta: $99,000 – $128,000
Compensation may vary based on depth of experience and demonstrated expertise.
The Opportunity
HireNow Staffing is partnering with a top-tier Am Law 100 law firm seeking a Senior Endpoint Engineer to play a critical role in shaping and supporting its global digital workspace strategy.
This position is designed for a hands-on technical authority—not a people manager—who thrives in complex, regulated environments and takes pride in building secure, standardized, and resilient endpoint platforms. You will be a key contributor to endpoint architecture, automation, application delivery, and security, supporting enterprise-wide initiatives tied to ISO 27001 compliance, zero-trust security, and long-term modernization.
Candidates with law firm or professional services experience and a demonstrated history of stability will be prioritized.
Why This Role Matters
Enterprise Impact: Your work directly supports thousands of users across a global professional services organization.
Security & Compliance Focus: Endpoint decisions here are tightly aligned with regulatory, audit, and data-protection requirements.
Engineering Ownership: This is a build-and-own role with deep technical influence and long-term platform responsibility.
Modernization at Scale: You'll help evolve legacy environments into standardized, automated, and cloud-forward endpoint solutions.
Key Responsibilities
Candidates must demonstrate the ability to independently deliver across the following areas to be considered for interview:
Design, engineer, and support endpoint solutions across Windows, iOS, Android, and VDI platforms
Build, maintain, and evolve standardized endpoint images using Intune, Windows Autopilot, and MDT
Automate application deployment, patching, and lifecycle management using Intune, MECM, PowerShell, and Windows Update for Business
Develop and maintain application packaging standards and deployment pipelines
Configure and enforce endpoint security, compliance policies, and device enrollment frameworks
Monitor endpoint health, performance, and adoption using Endpoint Analytics and telemetry data
Serve as Tier 3 escalation for complex endpoint issues, performing deep root-cause analysis
Lead endpoint initiatives such as OS upgrades, refresh cycles, platform modernization, and tooling enhancements
Partner closely with Security, Infrastructure, Desktop Support, and business stakeholders to drive continuous improvement
Core Technical Expertise
Endpoint Management & Lifecycle
Microsoft Intune, MECM, Windows Autopilot, modern device management at enterprise scale
Application Packaging & Automation
MSIX, WinGet, App-V, PSApp Deploy Toolkit, Intune Win32 packaging
Advanced PowerShell scripting for automation and orchestration
Operating Systems & Virtualization
Windows 10/11, Microsoft 365 Apps
Citrix Virtual Apps & Desktops, Azure Virtual Desktop, hybrid endpoint environments
Identity, Security & Compliance
Microsoft Entra ID (Azure AD), Conditional Access
Zero-trust security models
Defender for Endpoint, BitLocker, Group Policy
Endpoint telemetry, analytics, and compliance reporting
Advanced Troubleshooting
Deep expertise in Windows internals, drivers, registry, networking, and performance diagnostics
Required Qualifications
Bachelor's degree in computer science, Information Systems, or equivalent professional experience
8+ years in endpoint or systems engineering roles
3+ years supporting enterprise Windows 10/11 environments
2+ years hands-on experience with modern packaging and deployment tools (Intune, Autopilot, MDT, MSIX, PSApp Deploy Toolkit)
Experience supporting regulated or professional services environments (required)
U.S. work authorization (no visa sponsorship)
Demonstrated resume stability with consistent tenure and progression
Preferred Qualifications (Strongly Emphasized)
Candidates who stand out will bring:
Prior law firm experience supporting attorneys, legal staff, and compliance-driven environments
Microsoft certifications such as Endpoint Administrator Associate, Azure Administrator, or Enterprise Administrator Expert
Experience contributing to ISO 27001 or similar compliance frameworks
Proven success designing scalable endpoint standards across global environments
Strong documentation discipline and ability to translate technical decisions for non-technical stakeholders
A proactive, ownership-driven mindset with minimal need for oversight
