Senior Desktop and Endpoint Engineer

At Fried Frank, we’re a community of 800 lawyers and 500 business services professionals across New York, Washington, DC, London, Frankfurt, and Brussels. We advise leading corporations, investment funds, and financial institutions on high-stakes M&A, securities, regulatory matters, real estate, and litigation. Our culture is grounded in our core values — excellence, integrity and collaboration — and is designed to foster continuous learning, meaningful mentorship, and lasting professional growth. We are firmly committed to pro bono service and social justice, building on a proud legacy in civil rights. Our inclusive talent strategy is a core part of our broader talent management efforts and we remain steadfast in fostering a workplace where everyone has the opportunity to grow, thrive, and become their best professional and personal selves. Our business services professionals are integral to the firm’s success, driving innovation, operational excellence and exceptional client service across all areas of the firm. We offer competitive compensation and a comprehensive benefits package, including comprehensive medical coverage, retirement plans and health and wellness initiatives designed to support your personal and professional wellbeing. We welcome passionate, driven individuals to join us, and be part of a team where you’ll be supported, inspired and empowered to build an exceptional career.

Position Summary

We are seeking a highly skilled and motivated Senior Desktop and Endpoint Engineer to join our team. The primary responsibility of this role is to drive the journey of Intune adoption for endpoint management. The ideal candidate will have a strong background in Intune, SCCM, and Azure platforms, with expertise in PowerShell scripting and Power BI reporting.

Duties & Responsibilities:

• Implement and maintain Windows Autopilot enrollment profiles for device provisioning.
• Configure and manage Windows Update for Business policies to control update rings, deferral settings, and patching cadence.
• Promote Windows/Azure Virtual Desktop and Windows 365 Adoption.
• Administer and continuously optimize Microsoft Intune as the primary endpoint management platform, including configuration profiles, compliance policies, and conditional access integration.
• Manage and maintain Patch My PC integrations with Intune to automate third-party application patching and deployment.
• Enforce application whitelisting strategies using ThreatLocker App Control to reduce attack surface and ensure software compliance.
• Implement new features released by Microsoft to enhance endpoint management through cloud adoption.
• Develop PowerShell scripts for efficient management of endpoints on Intune/Azure platform.
• Collaborate with stakeholders to develop cross-platform automation solutions.
• Create PowerShell Auto Remediation Scripts for compliance issues.
• Develop and maintain Power BI dashboards for Windows/Security Compliance.
• Provision and manage virtual desktops with Azure virtual desktop infrastructure.
• Maintain hands-on expertise with Nerdio Manager for Enterprise features including auto-scaling, image management, and scripted actions.
• Stay up to date on the latest Microsoft updates and features.
• Evaluate new features and updates released by Microsoft and develop POCs and use-cases for adoption.
• Stay informed about the latest trends in the domain and engage in continuous learning.
• Maintain Intune Infrastructure.

Qualifications:

• 8-10 years of experience in SCCM, Intune, EntraID.
• 4+ years’ experience with PowerShell Scripting.
• Strong knowledge of Azure Active Directory.
• Strong knowledge of Azure Platform.
• Demonstrated impact with global teams.
• Knowledge of Systrack is a plus.
• Knowledge of O365 and Microsoft Teams is a significant plus.

Education / Experience:

• Bachelor’s degree in computer science or Electronics or equivalent combination of education and professional experience required.