Desktop Engineer

Kymera Therapeutics•Watertown, MA

3d•$115,000 - $200,000

About The Position

Kymera Therapeutics is seeking a highly capable Desktop Engineer to serve as the L3 escalation point for endpoint and user support within our hybrid Microsoft environment. This role is central to maintaining a secure, reliable, and well-managed computing experience for employees across the organization. The engineer will handle advanced troubleshooting, modern device management with Intune, identity and authentication support, and deep Windows client diagnostics. The ideal candidate brings a cloud-first mindset, with the judgment and experience to operate effectively in an environment where cloud and on-premises systems still coexist. They should understand the realities and constraints of a hybrid infrastructure while actively helping the organization move toward more modern, cloud-aligned practices. This role requires strong technical instincts, the ability to collaborate across Infrastructure, Cybersecurity, and Applications teams, and a commitment to improving the stability, security, and effectiveness of the end-user computing environment.

Requirements

5+ years supporting Windows endpoints in an enterprise environment
Experience with Microsoft Intune app deployment, policy management, and device troubleshooting
Strong troubleshooting skills across OS, identity, and Microsoft 365 services
PowerShell scripting skills for automation and remediation workflows
Solid understanding of hybrid Entra ID / Azure AD identity concepts
Experience diagnosing hardware issues and coordinating warranty repairs
Familiarity with DNS, VPN, and Wi-Fi troubleshooting
Strong written and verbal communication skills

Nice To Haves

Experience with Defender for Endpoint
Background in hybrid AD DS + Entra ID environments
Exposure to regulated industry environments (biotech, pharma, etc.)
Experience supporting modern endpoint and collaboration ecosystems
Analytical, detail-oriented, and methodical approach to problem-solving
Strong ownership mentality and follow-through on escalated issues
Comfortable collaborating across technical and non-technical teams
Committed to delivering a high-quality end-user computing experience

Responsibilities

Endpoint Management & Intune Support
Package, deploy, and maintain Win32 applications through Microsoft Intune
Build and update remediation scripts, configuration profiles, and compliance policies
Troubleshoot Autopilot enrollments, ESP issues, and device identity inconsistencies
Ensure consistent device hygiene, lifecycle management, and operational readiness
Identity & Access Management
Troubleshoot hybrid identity issues involving Entra ID, Azure AD Connect, and device join states
Support user and device identity lifecycle processes
Resolve authentication failures, directory sync issues, and group-based access concerns
Contribute to identity-related troubleshooting improvements and best practices
Microsoft 365 Support & Escalation
Provide advanced troubleshooting for Exchange Online, Teams, SharePoint, and OneDrive
Diagnose and resolve mail flow problems, permission conflicts, and policy inconsistencies
Support configuration and lifecycle management of M365 Groups
Assist with cross-service issues affecting collaboration and user productivity
Windows Client Engineering
Diagnose OS, driver, performance, profile, and Windows Update issues using advanced tools
Analyze event logs and system telemetry to determine root causes
Identify recurring endpoint issues and recommend corrective actions
Support imaging and Autopilot health by addressing underlying system issues
Scripting & Automation
Develop and maintain PowerShell scripts for support, remediation, and automation
Use JSON and basic Graph API calls when necessary
Identify opportunities to reduce manual work and improve consistency
Security & Compliance Support
Apply endpoint hardening practices and configuration standards
Perform initial triage of endpoint security alerts before escalation
Work closely with the Cybersecurity team on incident workflows and risk mitigation
Maintain device and user compliance with organizational policies
Networking & Connectivity Support
Troubleshoot DNS, VPN clients, Wi-Fi issues, and routing-related symptoms
Determine whether issues originate from the endpoint or the broader network
Assist users with connectivity problems affecting productivity
Hardware Diagnostics & Warranty Coordination
Use OEM diagnostic tools to identify potential hardware faults
Distinguish hardware failures from software or configuration issues
Coordinate RMAs, warranty service requests, and device replacements
Validate device health and readiness following repair or replacement
Cross-Team Collaboration & Documentation
Act as an escalation point for L1 and L2 support teams
Document troubleshooting procedures, runbooks, and best practices
Collaborate with Infrastructure, Cybersecurity, and Applications teams
Contribute to continuous improvement of endpoint-related processes