Senior Endpoint Engineer

Cooley AI; Colorado; On-site; USD 130,000 - 175,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

PTO: 21 days per year

10 paid holidays

Job summary

Cooley AI is seeking a Senior Endpoint Engineer to join the Innovation team and build the foundational IT infrastructure. You will deploy endpoint devices, administer Microsoft 365, manage IAM, and establish security and onboarding workflows.

The role is hands-on in a fast-moving environment, guiding policy creation, tooling, and support processes for a growing team. Strong collaboration with security and leadership is essential.

Qualifications

• 4+ years in IT operations, endpoint engineering, or systems administration
• Proficiency with Microsoft 365 including Exchange Online, SharePoint, Teams, Entra ID/Azure AD
• Experience with endpoint management platforms (Intune, Jamf)
• Knowledge of networking, VPN, firewalls, and enterprise IT infrastructure
• Experience with IAM including SSO, MFA, and policy-based access controls
• Scripting ability for automation (PowerShell, Bash, Python)

Responsibilities

• Configure and manage endpoint devices from imaging to decommissioning
• Stand up and administer Microsoft 365 environment (Exchange Online, SharePoint, Teams)
• Implement and manage MDM/UEM solutions to enforce security policies
• Develop onboarding/offboarding workflows and access controls
• Enforce endpoint security policies (EDR, disk encryption, patch management)
• Coordinate vendor relationships and manage budgets
• Create IT documentation and standard operating procedures

Skills

Microsoft 365 administration

Identity and access management

MDM/UEM (Intune/Jamf)

Networking fundamentals

SSO / MFA / conditional access

PowerShell / Bash / Python

Education

Bachelor’s degree in IT/CS or related field

Tools

Microsoft Intune

Jamf Pro

Azure AD

Job description

Cooley AI is seeking a Senior Endpoint Engineer to join the Innovation team.

About Cooley AI:

Cooley AI is the wholly-owned subsidiary of Cooley LLP. The frontier development arm of the leading technology law firm in the world. Our mission is to bring the best-in-class practices from the technology field into the legal domain to help lead our firm and the legal industry into the AI era. All employees of Cooley AI are employees of Cooley and are seconded to Cooley AI.

Position summary:

As a leading technology law firm, Cooley is determined to become a leader in the digital practice of law. The Endpoint Engineer is responsible for building and managing the foundational IT infrastructure for Cooley AI. This includes endpoint provisioning and lifecycle management, Microsoft 365 administration, identity and access management, and establishing the core IT policies, tooling, and support processes that enable a growing team to work securely and productively from day one. This role is hands-on and responsible for architecting systems and deploying them in a fast-moving, resource-lean environment. Specific duties and responsibilities include, but are not limited to, the following:

Position Responsibilities

• Configure, deploy, and manage endpoint devices including imaging, hardware standards, and lifecycle management from procurement through decommissioning
• Stand up and administer the Microsoft 365 environment including Exchange Online, SharePoint, OneDrive, Teams, and Entra ID (Azure AD) for identity and access management
• Implement and manage endpoint management solutions such as Microsoft Intune, Jamf, or similar MDM/UEM platforms to enforce security policies, deploy software, and manage device compliance
• Establish and maintain core IT infrastructure including networking and VPN
• Design and implement IT onboarding and offboarding workflows including account provisioning, device setup, access controls, and asset recovery to support rapid employee growth
• Develop and enforce endpoint security policies including disk encryption, endpoint detection and response (EDR), patch management, and conditional access policies
• Manage vendor relationships for hardware procurement, SaaS licensing, telecom, and IT service providers; negotiate contracts and manage budgets
• Establish and document policies, practices, and working procedures needed for the supported applications and services to deliver their intended results and for the customers to make efficient and effective use of technology
• Manage release cycles, software licensing audits, and third-level escalations
• Manage the design, development, testing and implementation of login scripts
• Evaluate, select, and implement SaaS tools and collaboration platforms that support a growing start-up team (e.g., Teams, Zoom, project management, password management)
• Create and maintain IT documentation including standard operating procedures, knowledge base articles, asset inventories, and network diagrams
• Provide hands-on Tier 1 and Tier 2 technical support for employees including troubleshooting, software issues, connectivity problems, and account access requests
• Partner with the security team to ensure endpoint configurations meet compliance requirements (SOC 2, ISO 27001) and support audit readiness
• All other duties as assigned or required

Required

Skills and experience:

• After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
• Ability to work extended and/or weekend hours, as required
• Ability to travel, as required
• 4+ years of directly applicable experience in IT operations, endpoint engineering, or systems administration
• Deep hands-on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID/Azure AD) including tenant configuration, licensing, and security settings
• Proficiency with endpoint management platforms such as Microsoft Intune, Jamf Pro, or comparable MDM/UEM solutions
• Strong understanding of networking fundamentals (DNS, DHCP, VPN, Wi-Fi, firewalls) and experience configuring office network infrastructure
• Experience with identity and access management including SSO, MFA, conditional access policies, and directory services
• Knowledge of endpoint security best practices including EDR, disk encryption (BitLocker/FileVault), patch management, and zero-trust principles
• Scripting ability (PowerShell, Bash, or Python) for automation of routine IT tasks and device provisioning

Preferred

• Bachelor’s degree in Information Technology, Computer Science, or related field
• Microsoft certifications (M365 Administrator, Azure Administrator, or Modern Desktop Administrator)
• Demonstrated experience building IT infrastructure from scratch or in start-up environments
• Experience supporting SOC 2 or ISO 27001 compliance from an endpoint and infrastructure perspective

Competencies

• Customer service mindset with a strong sense of urgency when supporting end users
• Comfortable operating as a hands-on builder in a start-up environment where processes and infrastructure are being created from the ground up
• Ability to make sound decisions quickly with incomplete information and shift priorities as business needs change
• Strong written and verbal communication skills with the ability to explain technical concepts to non-technical stakeholders
• Meticulous attention to detail, especially around security configurations, access controls, and documentation
• Resourceful problem solver who takes ownership and finds solutions without waiting for direction
• Collaborative team player who partners effectively across engineering, HR, security, and leadership teams
• Ability to manage multiple concurrent projects and priorities in a high-growth environment
• Unwavering ability to handle and maintain confidentiality regarding firm information, projects, client data
• High level of professionalism at all times
• Proactive, analytical mindset
• Effective presentation skills

Cooley LLP offers a competitive compensation and excellent benefits program. EOE.

The expected annual pay range for this position with a full-time schedule is $130,000 - $175,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience.

We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off (“PTO”) and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.