Endpoint Support Engineer

Title: Endpoint Support Engineer

Location: 100% onsite New York City, 221 E 71st Street,New York, NY 10021

Contract length: 6 months

Hours: 40 hours/week Monday through Friday 8am-5pm

Pay: 70/hr

Top 3 Technical / Soft

Skills

• Comfortable with testing processes and following industry best practices
• Review and validate certifications against the requirements outlined in the job description
• Ability to perform effectively in a fast-paced, high-pressure environment
• Previous experience working in lab environments

How many years of experience? 3 plus years of experience

1. Job Summary

The Endpoint Support Engineer provides dedicated, on-site technical support and endpoint engineering for faculty/staff endpoints as well as specialty arts, media, and performance spaces on the clients New York City campus. The role combines hands-on lab and studio support with endpoint administration in Jamf Pro and Microsoft Intune.

A primary focus of this engagement is migrating lab, studio, and teaching devices onto client standard management, security, and software delivery, then stabilizing those environments so they run reliably for instruction, production, and performance. The engineer serves as the on-the-ground technical lead for these spaces, working closely with faculty, lab managers, the central Endpoint Engineering team, network and security teams, college technology teams, and on-site ITS staff.

The ideal candidate is a self-directed technologist who is equally comfortable building a Jamf or Intune policy, activating a license on a studio workstation, and explaining a fix to a faculty member minutes before class. The role requires sound judgment about what to fix immediately on site and what to route through standard ITS processes.

Schedule and business continuity

Standard hours are Monday through Friday 8am-5pm, on site in New York City. The role requires occasional early morning, evening, or weekend availability to support term start, scheduled productions and performances, maintenance windows, and urgent issues that block instruction.

2. Minimum Qualifications

• 3+ years of experience in endpoint administration, desktop engineering, or advanced technical support in a mixed macOS and Windows environment.
• Hands-on experience administering Jamf Pro, including configuration profiles, policies, smart groups, PreStage enrollment, Self Service, and package deployment.
• Working experience with Microsoft Intune, including Windows Autopilot, compliance and configuration policies, and Win32 app deployment.
• Strong macOS troubleshooting skills, including permissions, privacy and security settings (TCC/PPPC), screen sharing and remote management, and OS upgrades.
• Experience supporting creative, media, or engineering software in a lab or studio environment, including network or per-device license activation.
• Experience with Apple School/Business Manager and Automated Device Enrollment.
• Scripting ability in zsh/bash and PowerShell to automate common endpoint tasks.
• Working knowledge of networking fundamentals (DNS, DHCP, VLANs, firewall ports) sufficient to diagnose license server and remote management connectivity.
• Experience documenting work in an ITSM platform such as ServiceNow.
• Strong verbal and written communication skills and the ability to work directly with faculty, students, and non-technical stakeholders.
• Ability to work on site in New York City 5 days per week and travel between campus buildings.
• Ability to lift up to 40 lbs, work under desks and in tight spaces, and stand for extended periods.

Preferred Qualifications

• Jamf Certified Admin (JCA) or Jamf Certified Expert (JCE); Microsoft Certified: Endpoint Administrator Associate (MD-102); Apple Certified Support Professional (ACSP).
• Experience administering Avid Pro Tools, Adobe Admin Console and Creative Cloud packaging, Vectorworks, or Sassafras KeyServer licensing.
• Familiarity with audio interfaces, MIDI devices, NDI, video capture, and theater or live production technology.
• Experience with device management migrations, tenant consolidations, or mergers.
• Experience with Microsoft Defender for Endpoint and Microsoft Entra ID groups and Conditional Access.
• Experience in a higher education IT environment.

3. Key Responsibilities and Accountabilities

1. Faculty, Staff, Specialty Lab, and Studio Endpoint Support -- 35%

• Provide on-site support for faculty/staff, arts, media, audio, design, and performance labs, studios, and teaching spaces, including computer labs, cart rooms, theater and production spaces, and student loaner devices.
• Install, configure, license, and troubleshoot specialty creative and production software, including Adobe Creative Cloud, Avid Pro Tools, Vectorworks, Final Draft, Isadora, NDI Tools, and subscription audio plugins that require per-device activation.
• Verify lab and teaching space readiness before each term and before scheduled productions, performances, and events.
• Respond to in-class and production-critical blockers on site, and coordinate with classroom AV support when issues cross into room technology.
• Gather software, version, and seat requirements from faculty and lab managers and route new requests through standard ITS intake channels.

2. Endpoint Management and Migration -- 30%

• Administer macOS and Windows devices in Jamf Pro and Microsoft Intune, including configuration profiles, policies, smart and dynamic groups, compliance policies, and Self Service catalogs.
• Migrate devices from legacy management platforms into client Jamf and Intune tenants, including Apple School/Business Manager reassignment, Automated Device Enrollment, device wipe and re-enrollment, and Windows Autopilot hash collection and group tagging.
• Package, deploy, and patch applications (macOS PKG/DMG, App Store/VPP, Win32, Microsoft 365) and keep operating systems at consistent, supported versions across lab fleets.
• Apply clients security baselines, including Microsoft Defender for Endpoint, FileVault, BitLocker, recovery locks, and local admin controls.
• Diagnose and resolve enrollment, profile, policy, and app delivery failures, and escalate platform-level issues to the central Endpoint Engineering team.

3. Lab Infrastructure and Licensing -- 15%

• Support network license and distribution servers for specialty software (for example Avid, Vectorworks, and Sassafras KeyServer), and validate client connectivity to centrally hosted license services.
• Partner with network, firewall, and identity teams to submit and test port, VLAN, wireless, and access requests that lab software and remote management depend on.
• Identify, document, and help retire unsupported or insecure legacy servers and equipment in lab spaces and network closets.
• Maintain accurate hardware and software inventory by room, including seat counts, license terms, and renewal dates.

4. General On-Site Client Support -- 15%

• Provide in-person technical support to faculty, staff, and students on the New York City campus, and serve as backup to the on-site Tech Bar during peak periods.
• Troubleshoot hardware, account access, Microsoft 365, printing, and connectivity issues, and perform device setup, imaging, and hardware swaps.
• Document all work in ServiceNow, meet incident and request response targets, and escalate to the appropriate ITS teams.

5. Documentation and Knowledge Transfer -- 5%

• Create and maintain runbooks, lab build standards, software inventories, and knowledge base articles for each supported space.
• Transition ongoing lab operations and documentation to permanent ITS staff and the Endpoint Engineering team before the contract ends.