Endpoint Support Engineer

Planet Group; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Planet Group is seeking an Endpoint Support Engineer in New York City to provide on-site technical support for labs and studios, with focus on Jamf Pro and Microsoft Intune administration. The role requires migrating devices to modern management and ensuring stable, instructor-ready environments.

The ideal candidate will have strong macOS/Windows troubleshooting skills, Apple school management experience, and scripting ability. Regular on-site work is required five days a week.

Qualifications

• 3+ years of experience in endpoint administration or desktop engineering.
• Hands-on Jamf Pro administration including policies and enrollment.
• Experience with Microsoft Intune and Windows Autopilot.
• Strong macOS troubleshooting and device management skills.
• Experience with lab or studio environments and per-device licensing.
• Familiarity with Apple School/Business Manager and ADE enrollment.
• Scripting ability in zsh/bash and PowerShell.
• Knowledge of networking basics and ServiceNow ITSM usage.
• Excellent verbal and written communication; able to work on-site in NYC five days a week.

Responsibilities

• Provide on-site support for labs, studios, and teaching spaces in NYC.
• Administer devices in Jamf Pro and Intune; manage policies and enrollments.
• Migrate devices to client Jamf/Intune; reassign ADE and Autopilot settings.
• Package and deploy applications; keep OS versions consistent across labs.
• Document work in ServiceNow and meet incident response targets.

Skills

Endpoint administration

Jamf Pro administration

Microsoft Intune

Apple School/Business Manager

Automated Device Enrollment

PowerShell

zsh/bash scripting

Networking fundamentals

ITSM / ServiceNow

Communication skills

On-site support experience

Physical lifting (40 lbs)

Tools

Jamf Pro

Microsoft Intune

ServiceNow

Apple School Manager

Automated Device Enrollment

PowerShell

zsh/bash

Job description

Title: Endpoint Support Engineer
Location:100% onsite New York City, 221 E 71st Street,New York, NY 10021
Contract length:6months
Hours: 40 hours/week Monday through Friday 8am-5pm
Pay:70/hr

Top 3 Technical / Soft Skills:

• Comfortable with testing processes and following industry best practices
• Review and validate certifications against the requirements outlined in the job description
• Ability to perform effectively in a fast-paced, high-pressure environment
• Previous experience working in lab environments

How many years of experience? 3 plus years of experience

1. Job Summary

The Endpoint Support Engineer provides dedicated, on-site technical support and endpoint engineering for faculty/staff endpoints as well as specialty arts, media, and performance spaces on the clients New York City campus. The role combines hands-on lab and studio support with endpoint administration in Jamf Pro and Microsoft Intune.

A primary focus of this engagement is migrating lab, studio, and teaching devices onto clientstandard management, security, and software delivery, then stabilizing those environments so they run reliably for instruction, production, and performance. The engineer serves as the on-the-ground technical lead for these spaces, working closely with faculty, lab managers, the central Endpoint Engineering team, network and security teams, college technology teams, and on-site ITS staff.

The ideal candidate is a self-directed technologist who is equally comfortable building a Jamf or Intune policy, activating a license on a studio workstation, and explaining a fix to a faculty member minutes before class. The role requires sound judgment about what to fix immediately on site and what to route through standard ITS processes.

Schedule and business continuity

Standard hours are Monday through Friday 8am-5pm, on site in New York City. The role requires occasional early morning, evening, or weekend availability to support term start, scheduled productions and performances, maintenance windows, and urgent issues that block instruction.

2. Minimum Qualifications

• 3+ years of experience in endpoint administration, desktop engineering, or advanced technical support in a mixed macOS and Windows environment.
• Hands-on experience administering Jamf Pro, including configuration profiles, policies, smart groups, PreStage enrollment, Self Service, and package deployment.
• Working experience with Microsoft Intune, including Windows Autopilot, compliance and configuration policies, and Win32 app deployment.
• Strong macOS troubleshooting skills, including permissions, privacy and security settings (TCC/PPPC), screen sharing and remote management, and OS upgrades.
• Experience supporting creative, media, or engineering software in a lab or studio environment, including network or per-device license activation.
• Experience with Apple School/Business Manager and Automated Device Enrollment.
• Scripting ability in zsh/bash and PowerShell to automate common endpoint tasks.
• Working knowledge of networking fundamentals (DNS, DHCP, VLANs, firewall ports) sufficient to diagnose license server and remote management connectivity.
• Experience documenting work in an ITSM platform such as ServiceNow.
• Strong verbal and written communication skills and the ability to work directly with faculty, students, and non-technical stakeholders.
• Ability to work on site in New York City 5 days per week and travel between campus buildings.
• Ability to lift up to 40 lbs, work under desks and in tight spaces, and stand for extended periods.

Preferred Qualifications

• Jamf Certified Admin (JCA) or Jamf Certified Expert (JCE); Microsoft Certified: Endpoint Administrator Associate (MD-102); Apple Certified Support Professional (ACSP).
• Experience administering Avid Pro Tools, Adobe Admin Console and Creative Cloud packaging, Vectorworks, or Sassafras KeyServer licensing.
• Familiarity with audio interfaces, MIDI devices, NDI, video capture, and theater or live production technology.
• Experience with device management migrations, tenant consolidations, or mergers.
• Experience with Microsoft Defender for Endpoint and Microsoft Entra ID groups and Conditional Access.
• Experience in a higher education IT environment.

3. Key Responsibilities and Accountabilities

1. Faculty, Staff, Specialty Lab, and Studio Endpoint Support -- 35%

• Provide on-site support for faculty/staff, arts, media, audio, design, and performance labs, studios, and teaching spaces, including computer labs, cart rooms, theater and production spaces, and student loaner devices.
• Install, configure, license, and troubleshoot specialty creative and production software, including Adobe Creative Cloud, Avid Pro Tools, Vectorworks, Final Draft, Isadora, NDI Tools, and subscription audio plugins that require per-device activation.
• Verify lab and teaching space readiness before each term and before scheduled productions, performances, and events.
• Respond to in-class and production-critical blockers on site, and coordinate with classroom AV support when issues cross into room technology.
• Gather software, version, and seat requirements from faculty and lab managers and route new requests through standard ITS intake channels.

2. Endpoint Management and Migration -- 30%

• Administer macOS and Windows devices in Jamf Pro and Microsoft Intune, including configuration profiles, policies, smart and dynamic groups, compliance policies, and Self Service catalogs.
• Migrate devices from legacy management platforms into clientJamf and Intune tenants, including Apple School/Business Manager reassignment, Automated Device Enrollment, device wipe and re-enrollment, and Windows Autopilot hash collection and group tagging.
• Package, deploy, and patch applications (macOS PKG/DMG, App Store/VPP, Win32, Microsoft 365) and keep operating systems at consistent, supported versions across lab fleets.
• Apply clientssecurity baselines, including Microsoft Defender for Endpoint, FileVault, BitLocker, recovery locks, and local admin controls.
• Diagnose and resolve enrollment, profile, policy, and app delivery failures, and elevate platform-level issues to the central Endpoint Engineering team.

3. Lab Infrastructure and Licensing -- 15%

• Support network license and distribution servers for specialty software (for example Avid, Vectorworks, and Sassafras KeyServer), and validate client connectivity to centrally hosted license services.
• Partner with network, firewall, and identity teams to submit and test port, VLAN, wireless, and access requests that lab software and remote management depend on.
• Identify, document, and help retire unsupported or insecure legacy servers and equipment in lab spaces and network closets.
• Maintain accurate hardware and software inventory by room, including seat counts, license terms, and renewal dates.

4. General On-Site Client Support -- 15%

• Provide in-person technical support to faculty, staff, and students on the New York City campus, and serve as backup to the on-site Tech Bar during peak periods.
• Troubleshoot hardware, account access, Microsoft 365, printing, and connectivity issues, and perform device setup, imaging, and hardware swaps.
• Document all work in ServiceNow, meet incident and request response targets, and elevate to the appropriate ITS teams.

5. Documentation and Knowledge Transfer -- 5%

• Create and maintain runbooks, lab build standards, software inventories, and knowledge base articles for each supported space.
• Transition ongoing lab operations and documentation to permanent ITS staff and the Endpoint Engineering team before the contract ends.