Lead Modern Workplace Engineer

What you'll do day-to-day Own the design, delivery, and lifecycle core Microsoft 365 collaboration services (SharePoint Online, Exchange Online, and OneDrive), spanning architecture, configuration governance, roadmap planning, and escalation-level troubleshooting. Design and maintain access and data controls across Microsoft Entra ID and Microsoft Purview (Conditional Access and compliance policies), collaborating with governance teams such as InfoSec, Legal, and Compliance, and with business-facing application development teams. Create automation with PowerShell and Microsoft Graph to drive policy deployment, configuration consistency, proactive remediation, and operational efficiency across M365 and adjacent end-user services, building tools that reduce manual effort for the EUC team and the service desk. Monitor the evolution of the Microsoft ecosystem and best practices-such as enterprise security, tenant governance, and collaboration lifecycle management-translating them into standards for the firm's environment. Independently lead projects end to end, scoping and sequencing the work, coordinating dependencies across teams, and driving them to completion as the accountable owner. Partner with teams across the firm to identify, design, and deliver new technologies and capabilities within the end-user space, including AI and Copilot enablement, enterprise mobility (MDM), and supporting development teams that build against Microsoft Graph and M365 services. Serve as a subject matter expert escalation point for complex technical issues, providing knowledge, guidance, and mentoring to the service desk and operations teams that directly support the firm's end users. What we're looking for At least eight years of engineering experience in the end-user computing space, particularly with hands-on building and operating solutions rather than managing teams; a degree in computer science (or another technical discipline) is preferred. Deep expertise in the Microsoft 365 ecosystem, with SharePoint Online, Exchange Online, and OneDrive at the core. A deep understanding of industry best practices across the Microsoft ecosystem and a record of applying them in production environments. Demonstrated experience with Microsoft Entra ID, including Conditional Access and modern authentication; familiarity with Microsoft Purview is a plus. Proficiency in PowerShell, with the ability to build automation against Microsoft Graph and M365 services. A proven track record of owning solution design and delivery end to end-as distinct from reactive, ticket-driven support-and of independently leading complex, multi-team projects to completion. Experience serving as a senior escalation point for complex issues raised by the service desk and operations teams. Excellent communication skills, a customer-service orientation, and the ability to collaborate with varied departments across the firm. Prior experience as a team lead or manager is welcome, though this role carries no direct reports and is designed for someone who wants to remain deeply technical. Hands-on experience engineering and operating an endpoint-management stack-Microsoft Intune and Workspace ONE for mobile device management (MDM), spanning device enrollment, compliance and configuration policies, application deployment, and enabling internal apps for mobile access-is a solid plus. Experience with Windows desktop engineering and endpoint management platforms (e.g., SCCM), macOS management (e.g., Jamf), endpoint security tooling (e.g., Microsoft Defender for Endpoint), Copilot and M365 AI enablement, or large-scale migrations and rollouts is a beneficial. The expected annual base salary for this position is $225,000 to $325,000. Our compensation and benefits package includes variable compensation in the form of a year-end bonus, guaranteed in the first year of hire, and benefits including medical and prescription drug coverage, 401(k) contribution matching, wellness reimbursement, family building benefits, and a charitable gift match program. The D. E. Shaw group is an equal opportunity employer. The applicable annual base salary or hourly rate paid to a successful applicant will be determined based on multiple factors, including without limitation the nature and extent of prior experience and educational background. European Union (EU) , United Kingdom (UK) , California , Hong Kong , Singapore , or Shanghai candidates should refer to the corresponding linked privacy notice. The D. E. Shaw group may collect, use, hold, transfer, and process candidates' resumes and associated information (including personal information contained therein) for purposes reasonably related to their application, including without limitation: review and management of employment applications and supporting materials; administration and management of offers to and communication with candidates; and administration, management, and improvement of the recruiting operations of the D. E. Shaw group; and/or where reasonably required in connection with a proposed sale, spin-out, reorganization, or outsourcing of all or some of the business of the D. E. Shaw group. The D. E. Shaw group will not use such information for purposes unrelated to the foregoing, such as direct marketing of third-party products to candidates, without candidate consent. As used herein, the term "personal information" is meant to broadly describe information identifying or relating to a specific individual; it is intended to encompass "personal data," "sensitive personal data," and "personally identifiable information" and similar terms, as those terms are defined by law in the jurisdictions in which the D. E. Shaw group operates. The D. E. Shaw group may transfer such personal information within and outside the country and jurisdiction of the locations where the D. E. Shaw group maintains offices, to other D. E. Shaw group affiliates, to government and regulatory authorities, and to third parties which provide or may provide support and/or services to the D. E. Shaw group and for the purposes set forth above. The persons who may have access to this personal information are other employees of the D. E. Shaw group, in connection with the performance of their duties of employment, and the other parties listed above, in connection with the business of the D. E. Shaw group. (Of course, candidates will be considered for employment opportunities only in those countries in which they express interest.) The D. E. Shaw group will use reasonable care to maintain the confidentiality of personal information (including appropriate technical measures against unauthorized or unlawful processing and against accidental loss or destruction of, or damage to, such information) and will retain such data as required by applicable law or regulation. Candidates have the right to request access to, and correction of, their personal information in accordance with applicable law; any such request should be submitted to View email address on click.appcast.io . Candidates who have submitted a resume to the D. E. Shaw group and do not wish to proceed with their applications should email View email address on click.appcast.io . Personal information of candidates who have been the subject of background checks may have been transferred in accordance with applicable regulations, and any concerns with such transfers should be submitted to View email address on click.appcast.io . The D. E. Shaw group may retain candidates' information for prospective recruiting activities, including sourcing candidates for employment opportunities and for organizing events with prospective candidates, in accordance with our internal data retention procedures. Candidates who do not agree to such future use should email View email address on click.appcast.io . D. E. Shaw & Co.