Senior Associate, Endpoint Engineering (Hybrid)

Position Overview
The Senior Associate, Endpoint Engineering is responsible for ensuring the security, performance, and reliability of our endpoints across multiple platforms, including Microsoft and Apple.

The Senior Associate, Endpoint Engineering will report to the Manager, Systems and Storage, and is based in Pew's Washington, DC office and is eligible for hybrid work.

Responsibilities

• Design, implement, and operate endpoint solutions for Microsoft and Apple devices.
• Manage endpoint provisioning workflows across operating systems using tools such as Intune and Jamf
• Design and implement endpoint security solutions and policies using tools such as Azure Conditional Access, Policy CSP, Windows Hello for Business, antivirus, encryption, firewall, and patch management.
• Monitor and analyze endpoint security events to identify potential security threats.
• Create comprehensive documentation for all implemented systems.
• Provide expert-level troubleshooting and issue resolution such as configuration, connectivity, performance, and malware.
• Research and evaluate new endpoint technologies, best practices, and provide recommendations for improvement that will increase cost effectiveness and systems flexibility.
• Collaborate with other IT teams and stakeholders to ensure seamless and reliable operation of software and systems for fulfilling business objectives and processes.
• Provide technical guidance and support to other members of the IT team, including mentorship to junior engineers.

Requirements

• Experience with Microsoft Azure, Microsoft 365, Azure Virtual Desktop
• Bachelor's degree or equivalent workplace experience required.
• Generally, requires 4 or 6+ years of experience in managing Microsoft and Apple endpoints, including Windows, macOS, iOS, and Android.
• Experience with endpoint management tools such as Microsoft Intune and Jamf Pro.
• Strong knowledge of endpoint security principles and practices, such as antivirus, encryption, firewall, and patch management.
• Understanding of passwordless authentication; experience with Windows Hello for Business preferred.
• Experience with Azure Cloud and related technologies, including Microsoft Entra and Azure Active Directory.
• Experience with scripting languages, such as PowerShell, KQL, Python, and Bash
• Ability to work independently and as part of a team.
• Excellent critical thinking skills and the ability to work under pressure.
• Effective communication skills and the ability to work effectively in a team environment.
• Certifications in endpoint security or management, such as Microsoft 365 Certified: Modern Desktop Administrator Associate or JAMF Certified Expert, are a plus.
• Ability to coordinate multiple tasks simultaneously and be a strong project lead, both with the internal team, and with the broader Pew staff, and external vendors and partners.
• Able to set priorities, organize time and identify resources for projects.
• Strong interpersonal, written, and verbal communications skills with the ability to present information in a compelling, polished and persuasive manner.

Travel
Occasional travel to Pew's offices as required. Additional travel may be required to attend training, seminars, or conferences.

Candidates must be legally authorized to work in the country for which they are seeking employment without the need of a visa sponsorship.

Total Rewards

We offer a competitive salary and benefit program, including: comprehensive, affordable health care through medical, dental, and vision coverage; financial security with life and disability insurance; opportunities to save using health savings and flexible spending accounts; retirement benefits to help prepare for the future; and work/life benefits to maintain a good balance.

The Pew Charitable Trusts is an equal opportunity employer, committed to a diverse and inclusive workplace. Pew considers qualified applicants for employment without regard to age, sex, ethnicity, religion, disability, marital status, sexual orientation or gender identity, military/veteran status, or any other basis prohibited by applicable law.