Senior Desktop Engineer

Friedman Williams; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Friedman Williams is seeking an experienced Endpoint Engineer to build and manage the foundational IT infrastructure for AI initiatives. The role covers endpoint provisioning, M365 administration, IAM, and core IT policy crafting for a fast-moving team.

You will implement Intune/Jamf Pro, manage VPN and networking, enforce security policies, and support audits for SOC 2/ISO 27001 while collaborating across security and operations.

Qualifications

• 4+ years of directly applicable experience in IT operations, endpoint engineering, or systems administration.
• Hands-on Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID) administration and security settings.
• Proficiency with endpoint management platforms such as Intune and Jamf Pro.
• Strong networking fundamentals (DNS, DHCP, VPN, Wi-Fi, firewalls).
• Experience with identity and access management including SSO and MFA.
• Knowledge of endpoint security best practices (EDR, disk encryption, patch management, zero-trust).
• Scripting ability (PowerShell, Bash, or Python) for automation.

Responsibilities

• Configure, deploy, and manage endpoint devices including imaging and lifecycle management.
• Stand up and administer M365 environment (Exchange Online, SharePoint, OneDrive, Teams, Entra ID).
• Implement and manage Intune, Jamf Pro to enforce security and deploy software.
• Establish and maintain core IT infrastructure including networking and VPN.
• Design onboarding/offboarding workflows and asset recovery for rapid growth.
• Develop and enforce endpoint security policies (EDR, encryption, patching, conditional access).
• Manage vendor relationships, contracts, and IT budgets.
• Document policies, procedures, and SOPs; create network diagrams and knowledge bases.
• Handle release cycles, software licensing audits, and escalations.
• Support SOC 2 / ISO 27001 compliance from endpoint and infra perspectives.
• Provide hands-on Tier 1/2 support for employees.

Skills

Endpoint provisioning

Microsoft 365

Identity & access management

Intune

Jamf Pro

Networking fundamentals

SSO / MFA

EDR / endpoint security

Scripting - PowerShell/Bash/Python

Education

Bachelor’s degree in Information Technology, Computer Science, or related field

Tools

Microsoft Intune

Jamf Pro

Azure Active Directory / Entra ID

VPN

Job description

Position summary:

As a leading technology law firm, the firm is determined to become a leader in the digital practice of law. The Endpoint Engineer is responsible for building and managing the foundational IT infrastructure for AI. This includes endpoint provisioning and lifecycle management, Microsoft 365 administration, identity and access management, and establishing the core IT policies, tooling, and support processes that enable a growing team to work securely and productively from day one. This role is hands‑on and responsible for architecting systems and deploying them in a fast-moving, resource‑lean environment. Specific duties and responsibilities include, but are not limited to, the following:

Position responsibilities

• Configure, deploy, and manage endpoint devices including imaging, hardware standards, and lifecycle management from procurement through decommissioning
• Stand up and administer the Microsoft 365 environment including Exchange Online, SharePoint, OneDrive, Teams, and Entra ID (Azure AD) for identity and access management
• Implement and manage endpoint management solutions such as Microsoft Intune, Jamf, or similar MDM/UEM platforms to enforce security policies, deploy software, and manage device compliance
• Establish and maintain core IT infrastructure including networking and VPN
• Design and implement IT onboarding and offboarding workflows including account provisioning, device setup, access controls, and asset recovery to support rapid employee growth
• Develop and enforce endpoint security policies including disk encryption, endpoint detection and response (EDR), patch management, and conditional access policies
• Manage vendor relationships for hardware procurement, SaaS licensing, telecom, and IT service providers; negotiate contracts and manage budgets
• Establish and document policies, practices, and working procedures needed for the supported applications and services to deliver their intended results and for the customers to make efficient and effective use of technology
• Manage release cycles, software licensing audits, and third‑level escalations
• Manage the design, development, testing and implementation of login scripts
• Evaluate, select, and implement SaaS tools and collaboration platforms that support a growing start‑up team (e.g., Teams, Zoom, project management, password management)
• Create and maintain IT documentation including standard operating procedures, knowledge base articles, asset inventories, and network diagrams
• Provide hands‑on Tier 1 and Tier 2 technical support for employees including troubleshooting, software issues, connectivity problems, and account access requests
• Partner with the security team to ensure endpoint configurations meet compliance requirements (SOC 2, ISO 27001) and support audit readiness
• All other duties as assigned or required

Skills and experience

Required

• Ability to work extended and/or weekend hours, as required
• Ability to travel, as required
• 4+ years of directly applicable experience in IT operations, endpoint engineering, or systems administration
• Deep hands‑on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID/Azure AD) including tenant configuration, licensing, and security settings
• Proficiency with endpoint management platforms such as Microsoft Intune, Jamf Pro, or comparable MDM/UEM solutions
• Strong understanding of networking fundamentals (DNS, DHCP, VPN, Wi‑Fi, firewalls) and experience configuring office network infrastructure
• Experience with identity and access management including SSO, MFA, conditional access policies, and directory services
• Knowledge of endpoint security best practices including EDR, disk encryption (BitLocker/FileVault), patch management, and zero‑trust principles
• Scripting ability (PowerShell, Bash, or Python) for automation of routine IT tasks and device provisioning

Preferred

• Bachelor’s degree in Information Technology, Computer Science, or related field
• Microsoft certifications (M365 Administrator, Azure Administrator, or Modern Desktop Administrator)
• Demonstrated experience building IT infrastructure from scratch or in start‑up environments
• Experience supporting SOC 2 or ISO 27001 compliance from an endpoint and infrastructure perspective