Manager, Modern Workplace Engineering

Davis Wright Tremaine LLP•Seattle, WA

3d•$170,000 - $181,000•Remote

About The Position

Davis Wright Tremaine LLP is seeking a Manager, Modern Workplace Engineering to lead the team responsible for designing, supporting, securing, and modernizing the firm’s End-User Computing environment. The scope includes desktops, laptops, virtual desktops, mobile devices, application delivery platforms, and user environment technologies. The manager oversees endpoint provisioning, software packaging and deployment, operating system and third-party patching, endpoint policies and security controls, virtual desktop services, device lifecycle management, mobile device management, endpoint compliance, monitoring, reporting, and advanced technical escalations. The role leads five Endpoint Engineers and works with IT leadership and cross-functional technology teams to maintain a secure, stable, efficient, user-focused digital workplace. Responsibilities include day-to-day operations, project delivery, personnel leadership, standard operating procedures, service health, budgeting, vendor management, and the endpoint technology roadmap. A key focus is moving from legacy, on-premises management toward cloud-native modern management, including Microsoft Intune, Windows Autopilot, cloud-based policies and compliance, cross-platform administration, automation, and modern patching, while maintaining continuity across existing technologies such as SCCM/MECM, Group Policy, and Ivanti. The position oversees endpoint engineering and device management; cloud-native endpoint modernization and strategy; software packaging, patch management, security, and compliance; virtual desktop infrastructure, mobility, and user experience; team leadership and collaboration; processes, workflows, documentation, and service management; and budgeting, vendors, projects, and resources. The manager also reports service health, risk, capacity, roadmap progress, project status, and modernization outcomes to IT leadership and stakeholders. The role is based in the Seattle office and may be performed fully remotely within reasonable commuting distance of any of the firm’s offices. The Washington annualized salary range is $170,000–$181,000. Actual pay may vary based on education, training, experience, and other job-related factors permitted by law. Full-time employees may be eligible for a bonus and the benefits described in the posting.

Requirements

Bachelor’s degree.
At least 8 years of enterprise endpoint engineering, end-user computing, modern workplace, device management, or closely related experience in a medium-to-large enterprise environment.
At least 5 years of technical leadership experience with responsibility for endpoint engineering services, production platforms, projects, roadmaps, and operational outcomes; ability to motivate, coach, and mentor a team.
At least 3 years of direct people-management experience, including hiring, coaching, performance management, skills development, succession planning, and leading teams that support a 24/7 customer base.
Demonstrated experience leading or materially contributing to an enterprise transition from traditional endpoint management toward cloud-native modern management while maintaining operational stability and security.
Advanced production experience with Microsoft Intune, including enrollment, configuration profiles, compliance policies, endpoint security policies, application deployment, reporting, RBAC, and device lifecycle administration.
Strong experience designing, implementing, or operating Windows Autopilot provisioning, including enrollment and deployment profiles, hardware registration, application delivery, and zero-touch or direct-ship scenarios.
Strong experience supporting hybrid and cloud-managed endpoint environments using Microsoft Intune together with SCCM/MECM during phased migration or co-management.
Deep knowledge of Windows endpoint engineering, Windows 11, Microsoft 365 Apps, software packaging, application compatibility, software deployment, Windows Update, third-party patching, endpoint telemetry, encryption, and system hardening.
Experience with Microsoft Entra ID device identities and close partnership with identity and security teams on Conditional Access, device compliance, device trust, MFA, Application Protection Policies, and Zero Trust-aligned controls.
Experience managing mobile devices and applications across iOS and Android, including enrollment, configuration, compliance, MDM, and MAM or application protection capabilities.
Experience managing virtual desktop environments and image lifecycles, such as VMware Horizon, Azure Virtual Desktop, Citrix, Windows 365, or comparable enterprise platforms.
Demonstrated experience with user profile management, user environment management, application control, personalization, Group Policy, and migrating legacy controls to modern cloud-based alternatives.
Proficiency with PowerShell and experience using APIs, automation, orchestration, or workflow tools to administer endpoints at scale and reduce manual effort.
Experience developing endpoint technology roadmaps, architecture standards, operating procedures, service metrics, budgets, vendor strategies, business cases, and project plans.
Strong organizational and project leadership skills, including the ability to manage operational work, major incidents, security remediation, concurrent projects, modernization initiatives, and competing priorities.
Strong written, verbal, customer interaction, and stakeholder management skills, including the ability to translate business, security, and legal requirements into scalable technical solutions.

Nice To Haves

Experience managing macOS through Microsoft Intune or another enterprise Apple management platform, including enrollment, configuration, compliance, patching, application delivery, and Apple Business Manager integration.
Microsoft certifications in Endpoint Administration, Identity and Access, Security, Microsoft 365, Azure, or comparable modern workplace disciplines; ITIL or equivalent service-management training.
Experience in a law firm, professional services organization, regulated environment, or highly client-service-oriented enterprise, with familiarity supporting confidentiality, information governance, and business continuity requirements.

Responsibilities

Oversee configuration, provisioning, operation, and lifecycle management of firm-issued desktops, laptops, mobile devices, and virtual desktop environments.
Manage endpoint platforms and transitional technologies, including Microsoft Intune, Windows Autopilot, SCCM/MECM, Microsoft Group Policy, Ivanti Environment Manager, and related management and reporting tools.
Lead endpoint hardware standards, refresh planning, device replacement, secure retirement, inventory governance, and lifecycle forecasting.
Develop and maintain monitoring, telemetry, reporting, service-level indicators, and KPIs for endpoint health, compliance, inventory, reliability, and user experience.
Own and execute the endpoint technology roadmap in alignment with the firm’s cloud strategy and modern workplace objectives.
Lead the phased transition from legacy endpoint management and user environment technologies toward cloud-based management, configuration, and identity-integrated controls while maintaining operational continuity and rollback options.
Establish standards for endpoint architecture, governance, role-based access, enrollment, configuration, compliance, updates, application delivery, and reporting across Windows, macOS, iOS, and Android.
Build team proficiency in cloud-native endpoint technologies through training, knowledge transfer, documentation, and practical ownership.
Oversee application packaging, compatibility testing, integration, software deployment, version control, and lifecycle management across physical and virtual endpoints.
Lead operating system, Microsoft application, and third-party application update and patch cycles, balancing security, testing, change control, business continuity, and user impact.
Partner with Security and Identity Services on endpoint hardening, vulnerability remediation, encryption, Microsoft Defender integrations, device compliance, Conditional Access, Application Protection Policies, device trust, and Zero Trust-aligned controls.
Track and remediate endpoint non-compliance, configuration drift, application control exceptions, and security findings using monitoring, alerting, reporting, and automation.
Ensure endpoint controls support legal, regulatory, client, information governance, and litigation hold requirements as applicable.
Manage the design, configuration, image lifecycle, entitlements, capacity, performance, and operational health of virtual desktop services, including VMware Horizon and Azure Virtual Desktop or successor platforms.
Oversee user profiles, personalization, application control, and user environment technologies, including Ivanti and future cloud-based alternatives.
Evaluate and implement endpoint, virtualization, mobility, Cloud PC, and modern workplace capabilities that improve flexibility, security, resiliency, and employee experience.
Provide technical leadership, mentorship, guidance, and performance management to a team of five Endpoint Engineers.
Conduct one-on-one meetings, goal setting, skills development planning, hiring, performance reviews, succession planning, cross-training, and career coaching.
Set team priorities and balance operational support, projects, security remediation, modernization, and technical debt reduction.
Collaborate with Security, Networking, Infrastructure, Messaging, Identity Services, Digital Collaboration, Service Desk, Application Services, Information Governance, and project teams.
Serve as the senior escalation point for endpoint incidents, systemic issues, security events, and technical decisions requiring management oversight.
Establish and maintain standard operating procedures, architecture records, configuration baselines, deployment workflows, support documentation, inventories, service ownership, and escalation paths.
Ensure adherence to firmwide change, incident, problem, release, vulnerability, and project management processes.
Drive automation-first engineering using PowerShell, APIs, orchestration, and workflow tools.
Identify and remediate recurring issues, knowledge gaps, single points of failure, and technical debt.
Report service health, risk, capacity, roadmap progress, project status, and modernization outcomes to IT leadership and stakeholders.
Participate in annual IT budgeting and multi-year planning for endpoint hardware, software, licensing, professional services, training, and modernization initiatives.
Manage vendor relationships for endpoint management, desktop hardware, virtual desktop services, application delivery, and related professional services.
Lead or sponsor endpoint projects, develop business cases, coordinate internal and external resources, manage dependencies and risks, and communicate status to stakeholders.
Track team capacity and resource utilization and recommend investments to improve security, performance, user experience, resiliency, and cost effectiveness.