[Hiring] Manager, Modern Workplace Engineering @Davis Wright Tremaine LLP

Role Description

This is an exciting opportunity to work for one of the top law firms in the U.S.! Davis Wright Tremaine LLP is looking for a Manager, Modern Workplace Engineering to join our team in our Seattle office. This position offers the flexibility to be fully remote while working within reasonable commuting distance from any of our offices.

This role is responsible for overseeing and leading the team that designs, supports, secures, and modernizes the firm's End-User Computing (EUC) environment, including:

• Desktops
• Laptops
• Virtual desktops
• Mobile devices
• Application delivery platforms
• User environment technologies

The Manager, Endpoint Engineering leads a team of five engineers and collaborates with IT leadership and cross-functional technology teams to ensure a secure, stable, efficient, and user-focused digital workplace. The role is accountable for:

• Day-to-day operations
• Project delivery
• Personnel leadership
• Standard operating procedures
• Service health
• Budgeting
• Vendor management
• Endpoint technology roadmap

A central responsibility of this position is to lead the firm's transition from legacy, on-premises endpoint management toward cloud-native modern management. The manager will guide the adoption and optimization of:

• Microsoft Intune
• Windows Autopilot
• Cloud-based policy and compliance management
• Cross-platform endpoint administration
• Automation
• Modern patching

On a typical day you will:

• Oversee the configuration, provisioning, operation, and lifecycle management of all firm-issued desktops, laptops, mobile devices, and virtual desktop environments.
• Manage endpoint platforms and transitional technologies including Microsoft Intune, Windows Autopilot, SCCM/MECM, Microsoft Group Policy, Ivanti Environment Manager, and related management and reporting tools.
• Lead endpoint hardware standards, refresh planning, device replacement, secure retirement, inventory governance, and lifecycle forecasting.
• Develop and maintain monitoring, telemetry, reporting, service-level indicators, and KPIs for endpoint health, compliance, inventory, reliability, and user experience.
• Own and execute the endpoint technology roadmap in alignment with the firm's broader cloud strategy and modern workplace objectives.
• Lead the phased transition from SCCM/MECM, traditional imaging, Group Policy, and legacy user environment management toward Microsoft Intune, Windows Autopilot, cloud-based configuration, and modern identity-integrated controls.
• Establish modern management architecture, governance, RBAC, enrollment, configuration, compliance, update, application delivery, and reporting standards for Windows, macOS, iOS, and Android.
• Drive implementation of cloud-based provisioning, including zero-touch and direct-ship deployment models, while preserving a reliable coexistence and rollback strategy during migration.
• Build team proficiency in cloud-native endpoint technologies through structured training, knowledge transfer, documentation, and practical ownership.
• Oversee application packaging, compatibility testing, integration, software deployment, version control, and lifecycle management across physical and virtual endpoint platforms.
• Lead operating system, Microsoft application, and third-party application update and patch cycles, balancing security, testing, change control, business continuity, and user impact.
• Partner with the Security Office and Identity Services on endpoint hardening, vulnerability remediation, encryption, Microsoft Defender integrations, device compliance, Conditional Access, Application Protection Policies, device trust, and Zero Trust-aligned access controls.
• Track and remediate endpoint non-compliance, configuration drift, application control exceptions, and security findings using monitoring, alerting, reporting, and automation.
• Ensure endpoint controls support legal, regulatory, client, information governance, and litigation hold requirements as applicable.
• Manage the design, configuration, image lifecycle, entitlements, capacity, performance, and operational health of the firm's virtual desktop services, including VMware Horizon and Azure Virtual Desktop or successor platforms.
• Oversee user profile, personalization, application control, and user environment technologies, including Ivanti and future cloud-based alternatives.
• Evaluate and implement emerging endpoint, virtualization, mobility, Cloud PC, and modern workplace capabilities that improve flexibility, security, resiliency, and employee experience.
• Provide direct guidance, mentorship, technical leadership, and performance management to a team of five Endpoint Engineers.
• Conduct one-on-one meetings, goal setting, skills development planning, hiring, performance reviews, succession planning, cross-training, and career coaching.
• Set priorities and balance operational support, project commitments, security remediation, modernization activities, and technical debt reduction across the team.
• Collaborate with Security, Networking, Infrastructure, Messaging, Identity Services, Digital Collaboration, Service Desk, Application Services, Information Governance, and project teams to deliver integrated solutions.
• Act as the senior escalation point for endpoint incidents, systemic issues, security events, and technical decisions requiring management oversight.
• Establish and maintain standard operating procedures, architecture records, configuration baselines, deployment workflows, support documentation, inventories, service ownership, and escalation paths.
• Ensure team adherence to firmwide change, incident, problem, release, vulnerability, and project management processes.
• Drive automation-first engineering using PowerShell, APIs, orchestration, and workflow tools to improve consistency, scalability, and supportability.
• Identify and remediate recurring issues, knowledge gaps, single points of failure, and technical debt.
• Define and report service health, risk, capacity, roadmap progress, project status, and modernization outcomes to IT leadership and stakeholders.
• Participate in annual IT budgeting and multi-year planning for endpoint hardware, software, licensing, professional services, training, and modernization initiatives.
• Manage vendor relationships for endpoint management, desktop hardware, virtual desktop services, application delivery, and related professional services.
• Lead or sponsor endpoint projects, develop business cases, coordinate internal and external resources, manage dependencies and risks, and communicate status to stakeholders.
• Track team capacity and resource utilization and recommend investments that improve security, performance, user experience, resiliency, and cost effectiveness.

Qualifications

• Bachelor's Degree
• 8+ years enterprise endpoint engineering, end-user computing, modern workplace, device management, or closely related experience in a medium-to-large enterprise environment.
• 5+ years technical leadership experience with responsibility for endpoint engineering services, production platforms, projects, roadmaps, and operational outcomes; demonstrated ability to motivate and provide meaningful coaching and mentorship to provide top level service within an organization.
• 3+ years direct people-management experience, including hiring, coaching, performance management, skills development, succession planning, and leading teams that support a 24/7 customer base.
• Demonstrated experience leading or materially contributing to an enterprise transition from traditional endpoint management toward cloud-native modern management while maintaining operational stability and security.
• Advanced production experience with Microsoft Intune, including enrollment, configuration profiles, compliance policies, endpoint security policies, application deployment, reporting, RBAC, and device lifecycle administration.
• Strong experience designing, implementing, or operating Windows Autopilot provisioning, including enrollment profiles, deployment profiles, hardware registration, application delivery, and zero-touch or direct-ship scenarios.
• Strong experience supporting hybrid and cloud-managed endpoint environments that use Microsoft Intune together with SCCM/MECM during phased migration or co-management.
• Deep knowledge of Windows endpoint engineering, Windows 11, Microsoft 365 Apps, software packaging, application compatibility, software deployment, Windows Update, third-party patching, endpoint telemetry, encryption, and system hardening.
• Experience with Microsoft Entra ID device identities and close partnership with identity and security teams on Conditional Access, device compliance, device trust, MFA, Application Protection Policies, and Zero Trust-aligned controls.
• Experience managing mobile devices and applications across iOS and Android, including enrollment, configuration, compliance, MDM, and MAM or application protection capabilities.
• Experience managing virtual desktop environments and image lifecycles, such as VMware Horizon, Azure Virtual Desktop, Citrix, Windows 365, or comparable enterprise platforms.
• Demonstrated experience with user profile management, user environment management, application control, personalization, Group Policy, and migration of legacy controls toward modern cloud-based alternatives.
• Proficiency with PowerShell and experience using APIs, automation, orchestration, or workflow tools to administer endpoints at scale and reduce manual effort.
• Experience developing endpoint technology roadmaps, architecture standards, operating procedures, service metrics, budgets, vendor strategies, business cases, and project plans.
• Strong organizational and project leadership skills with the ability to manage operational work, major incidents, security remediation, concurrent projects, modernization initiatives, and competing priorities.
• Strong written, verbal, customer interaction, and stakeholder management skills, including the ability to translate business, security, and legal requirements into scalable technical solutions.
• Experience managing macOS through Microsoft Intune or another enterprise Apple management platform, including enrollment, configuration, compliance, patching, application delivery, and Apple Business Manager integration.
• Microsoft certifications in Endpoint Administration, Identity and Access, Security, Microsoft 365, Azure, or comparable modern workplace disciplines; ITIL or equivalent service-management training is also preferred.
• Experience in a law firm, professional services organization, regulated environment, or highly client-service-oriented enterprise, with familiarity supporting confidentiality, information governance, and business continuity requirements.

Benefits

• Choice of health and vision insurance plans
• 2 paid volunteer days for qualifying community service work
• Dental plan
• Fertility and adoption benefit
• Paid sabbatical after 13 years of service
• Tuition reimbursement
• Commuter benefits
• Retirement contribution