Endpoint Engineer

At ArentFox Schiff, we know that diverse backgrounds produce different perspectives, richer thinking, and more creative solutions to the challenges our clients face. We hope you share that vision. Join us and take on the challenge of doing meaningful work while helping us build a culture that reflects our dedication to diversity, equity, and inclusion. We base all of our employment decisions on merit and do not discriminate on the basis of any legally protected characteristic. JOB TITLE: Endpoint Engineer DEPARTMENT: Information Technology REPORTS TO: Sr. Enterprise Applications & Engineering Manager FLSA CLASSIFICATION: Exempt LOCATION: This position is available in any of our office locations - Boston, Chicago, Los Angeles, New York, Washington, DC, or San Francisco JOB SUMMARY The Endpoint Engineer will manage and maintain the firm's physical and virtual Modern Endpoint environment. This role will be a member of the firm-wide Enterprise Applications team, and will focus on deployment and management of secure, scalable and efficient endpoint solutions tailored to the legal industry's unique demands. Individuals in this role will have experience with Microsoft Intune; Windows and MacOS deployment, configuration, management and servicing; Autopilot, Windows 11, Azure Virtual Desktop, Citrix non-persistent VDI, and PowerShell scripting for custom delivered solutions and application delivery automation. This role will require highly collaborative individuals working with several internal and external teams to organize, troubleshoot and deliver solutions to systemic OS and application issues using all available tools and methods, allowing for highly scalable, customizable and optimized solution deployments. In addition, by way of exceptional troubleshooting and root cause analysis skills, the Endpoint Engineer will resolve escalated issues in a timely manner and provide updates for completed work to colleagues and management. ESSENTIAL DUTIES AND RESPONSIBILITIES* Administer, manage, and maintain the end-user computing environments (MECM, Jamf Intune, Citrix, Microsoft365/Office365 Suite). Package/customize and deploy applications using PSADT and Intune/Jamf/MECM Package and deploy OS and M365 Apps monthly updates and patches. Design/build/manage/maintain Autopilot pre-provisioning and user-provisioning profiles for Windows 11. Design/build/manage/maintain Intune Device Configurations for Browsers, Microsoft 365 Apps, Windows 11 OS, Application Protection Policies and custom PowerShell scripts as necessary. Manage & maintain non-persistent Microsoft AVD, Citrix VDI and Citrix Published Applications Collaborate & communicate with all IT teams to identify issues and provide sustainable solutions. Tier 3 support for internal support escalations where it relates to the end user computing platform (OS, software, and/or hardware). Review existing processes/procedures/technology and provide suggestions to streamline and optimize the environment. Create and update technical documentation on all new software/service implementations. Present updates on new/changing technology in the end-user computing space to management. Complete special projects on various technologies as needed. MINIMUM QUALIFICATIONS Knowledge/Skills/Abilities: Advanced knowledge of Microsoft Intune, Autopilot provisioning, Device Configurations, Application Policies. Advanced knowledge of Microsoft Endpoint Configuration Manager (MECM). Advanced knowledge of Application packaging/customization/deployment using PSADT and Intune Win32 App packaging tool. Advanced knowledge of Microsoft PowerShell. Knowledge of EntraID Enterprise Applications setup and management for SSO and app integrations. Knowledge of EntraID User and Group management for purpose of Application and Configuration deployments. Knowledge of Microsoft Active Directory & Group Policy management. Knowledge of User-Profile Management Solutions (FSLogix, Appsense Environment Manager, etc.). Manage & maintain Azure Virtual Desktop, Citrix virtual desktop (VDI) and/or virtual published applications platform (Citrix XenApp, VMware Horizon). Manage Microsoft 365 Apps configurations & Integrations. Ability & curiosity to discover technical deficiencies, present solutions to a peer team, and work to implement and improve the broader technology landscape. Education: Bachelor's degree, or experience/training in lieu of degree Relevant vendor certifications preferred Experience: 3+ years of Managing physical Windows workstations in a multi-location Microsoft enterprise. 3+ years of OS/Software/Patch deployment with MECM. 3+ years of Active Directory/OU/GPO management for workstations. 1+ years of managing & maintaining Windows virtual desktop (VDI) and/or virtual published applications platform (Citrix XenApp, VMware Horizon). Experience working in a legal environment is preferred. ABOUT ARENTFOX SCHIFF: ArentFox Schiff LLP is internationally recognized in core industries where business and the law intersect. With more than 600 lawyers and policy professionals, the firm serves as a destination for an international roster of corporations, governments, private individuals, and trade associations. The annualized good faith base salary range for this position in the following location(s): Chicago: is a minimum of $104,000 to a maximum of $156,000 per year. The actual salary rate offered to candidates within that range will depend on a variety of factors, including without limitation, years of relevant experience, education, applicable certifications, and other relevant professional licenses held, and the candidate's overall qualifications for the position as assessed by the Firm. ArentFox Schiff is committed to equal employment opportunity and diversity in the workplace. We base all employment decisions on merit and maintain a policy of considering all qualified applicants for employment without regard to race, color, religion or creed, sex, gender, sexual orientation, gender identity or expression, age, citizenship status, order of protection status, national origin, ancestry, medical condition, genetic information, marital status, physical or mental disability, parental status, source of income, military or veteran status, unfavorable discharge from military service, or any other basis protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance. * A job description is a general description of the function and major duties of a job. It may not specify all duties, tasks, and assignments associated with a job. It is not intended to limit or in any way modify the right of management to direct, assign, and control the work of employees in a unit. Accuracy, attention to detail, ability to work effectively in a team environment, and ability to work in an atmosphere of multiple projects and shifting priorities are requirements of all jobs at ArentFox Schiff LLP. Additional job-related qualifications may be specified for some openings. Job descriptions are subject to periodic review. WORKING CONDITIONS The following table indicates the degree of working conditions expected for the job. Reasonable accommodations may be made to enable individuals with disabilities to meet these requirements. N/A = 0-10%, Occasionally = 11-33%, Frequently = 34 - 66%, Constantly = 67 - 100% Requirement Frequency Travel N/A Sitting Constantly Standing Occasionally Walking Occasionally Reading Constantly Typing Constantly Concentration Constantly Oral and Written Communication Constantly Horizontal Reaching N/A Vertical Reaching N/A Twisting N/A Repetitive Arm/Hand/Finger Movements Frequently Weight Occasionally, up to 15 lbs.