Associate Director, Endpoint Engineering

The New York Public Library; New Bern, Morehead City (NC, NC); Hybrid; USD 155,000 - 175,000; Full time

Job summary

The New York Public Library is seeking an Associate Director, Endpoint Engineering to lead the architecture, deployment, and operation of desktop and endpoint services for Windows and macOS. You will drive modernization from SCCM/AD to cloud-native devices and empower teams with automation.

You will manage a team of about 9 staff, partner with Product Management and Cybersecurity, and deliver measurable improvements in reliability, security, and efficiency.

Qualifications

• Bachelor’s Degree required.
• 7+ years of IT endpoint engineering experience.
• 5+ years of people management/supervisory experience.
• Experience utilizing AI-assisted development tools to enhance scripting efficiency.
• Experience engineering scalable Windows and macOS endpoint platforms.

Responsibilities

• Lead architecture, deployment, and operation of desktop and endpoint services across Windows and macOS environments.
• Provide strategic and operational leadership for the Client Technology Engineering team.
• Define endpoint standards for provisioning, patching, configuration, and security baselines with emphasis on automation.
• Drive an automation-first engineering culture using scripting (PowerShell) and AI-powered tools to reduce debt and enable zero-touch provisioning.
• Lead migration from legacy infrastructure to modern cloud-native device management (Intune/Entra ID).
• Collaborate with IT Product Management to deliver roadmaps prioritizing stability and security.
• Oversee vendor relationships and product life-cycle management for endpoints.
• Communicate status, risks, and architectural decisions to IT leadership.

Skills

Windows Architecture

Active Directory

Group Policy

SCCM

Intune

Entra ID

PowerShell

Automation

Endpoint Security

Leadership

Communication

AI Tools

Education

Bachelor’s Degree

Tools

Google Workspace

Microsoft 365

Jamf

SCCM

Intune

Entra ID

Job description

Compensation: $155,000 - $175,000 / year

Department: Information Technology

Location: Crystal Building 40 W20th St

Compensation: $155,000 - $175,000 / year

Description

Overview

The IT Infrastructure and Operations department at The New York Public Library (NYPL) is responsible for architecting, engineering, and transforming technical solutions delivering mission-critical services to Library staff and patrons. This role is central to the modernization of NYPL’s endpoint ecosystem, driving the strategic migration from legacy infrastructures, including Active Directory, Group Policy, and SCCM, to modern, cloud-native platforms like Microsoft Intune and Entra ID.

The Associate Director, Endpoint Engineering will oversee the client-facing technology products and services delivered to staff and patrons including, Modern Workplace, Desktop Engineering, and Solutions Engineering. This role is responsible for modernizing and operating NYPL’s staff and public facing endpoint environment, including Windows and macOS devices, and leading the transition to cloud-based device management.

1 month

• Build working relationships with Product Managers, Cybersecurity, and peer IT leaders.
• Gain a baseline understanding of the current endpoint environment (Windows, macOS, SCCM, Intune, Jamf).
• Meet the team to understand strengths, gaps, and short-term priorities.

3 months

• Complete an assessment and define a phased roadmap for modern MDM-based management.
• Assume ownership of assigned desktop and endpoint services, leading the Desktop and Solutions Engineering teams.
• Begin driving operational improvements through automation.

6 months and beyond

• Lead execution of the MDM modernization roadmap.
• Own the desktop and endpoint services portfolio, partnering with Product Management and Cybersecurity on roadmap prioritization.
• Deliver measurable improvements in reliability, security, and operational efficiency.

Responsibilities

• Lead the architecture, deployment, and operation of desktop and endpoint services across Windows and macOS environments
• Provide strategic and operational leadership for the Client Technology Engineering team
• Define endpoint standards for provisioning, patching, configuration, and security baselines, emphasizing automation
• Drive an "automation-first" engineering culture by implementing advanced scripting (PowerShell) and leveraging AI-powered development tools to reduce technical debt and accelerate zero-touch provisioning
• Lead the migration from legacy infrastructure (SCCM/GPO/AD) to modern, cloud-native device management (Intune/Entra ID)
• Collaborate with IT Product Management to deliver roadmap initiatives that prioritize service stability and security
• Oversee vendor relationships and product life-cycle management for endpoint technologies
• Communicate status, risks, and architectural decisions to IT leadership and stakeholders
• Perform other related duties as assigned

Required Education, Experience & Skills

• Bachelor’s Degree required

Required Experience

• 7+ years of progressive, IT endpoint engineering experience
• 5+ years of people management/supervisory experience including coaching, mentoring, and guiding large engineering teams
• Experience utilizing AI-assisted development tools to enhance scripting efficiency and streamline complex endpoint management workflows
• Experience engineering and architecting scalable Windows and macOS endpoint platforms
• Hands-on experience managing Email and productivity systems such as Google Workspace, Microsoft 365, etc
• Experience with vendor evaluation and management, including RFPs and service relationships

Required Skills

• Expertise in Windows Architecture, specifically Active Directory, Group Policy, SCCM, and Intune
• Strong leadership experience with modern endpoint management platforms, including Microsoft Intune/Entra ID and Jamf
• Ability to manage multiple, concurrent initiatives while balancing operational stability and modernization
• Solid understanding of endpoint security fundamentals, including device compliance, identity integration, and security baselines
• Advanced proficiency in PowerShell and API-driven automation (e.g., Microsoft Graph) to build scalable, repeatable endpoint solutions
• Ability to improve operational efficiency through automation, standardization, or process improvement.
• Familiarity with legacy desktop management tools (e.g., SCCM) and experience planning or executing migrations away from them
• Expertise in architectural problem-solving across endpoint, identity, and device management domains
• Ability to define and track operational metrics (KPIs, SLAs) for endpoint services.
• Strong communication and collaboration skills across technical and non-technical teams

Managerial/Supervisory Responsibilities

• Lead a team of approximately 9 staff; mentoring, coaching, planning, and execution.

More...

Core Values

All team members are expected and encouraged to embody the NYPL Core Values:

• Be Helpful to patrons and colleagues
• Be Resourceful in solving problems
• Be Curious in all aspects of your work
• Be Welcoming and Inclusive

Work Environment

• Office setting
• Branch library setting

Physical Duties

• Lift/move equipment up to 25 lbs
• Travel to NYPL sites as needed

Pre-Placement

Physical Required?

• No

Union/Non Union

• Non-Union

FLSA Status

• Exempt

Schedule

• Monday-Friday from 9:00am-5:00pm; available on-call after hours and weekends as needed
• Hybrid schedule; 3 days onsite and 2 days remote as workload permits

This job description represents the types and levels of responsibilities that will be required of the position and shall not be construed as a declaration of all of the specific duties and responsibilities for the role. Job duties may change if Library priorities change. Employees may be directed to perform job-related tasks other than those specifically presented in this description as needed.

The New York Public LibrarySalary StatementAt the Library, we believe that pay transparency and pay equity are important to ensuring we source the best candidates and keep the best employees. When making a determination as to the appropriate salary for a candidate, we consider a variety of factors such there, including, but not limited to, the position requirements, the skills, prior experience, and educational background required or preferred for the job, the scope and impact of the role within the organization, internal peer equity, and the candidate's specific training, experience, education level, and skills. No single factor is conclusive; the Library reserves the right to consider any and all relevant factors and make a decision consistent with its policies.

Union Salaries are determined by collective bargaining agreement(s).