Endpoint Support Engineer - Onsite in NYC

ENDPOINT SUPPORT ENGINEER OPPORTUNITY - ONSITE IN NYC 6 month contract onsite 5 days/week $60-70/hr on W2 Candidates must be able to work directly on a W2 without sponsorship. No C2C!! Job Summary The Endpoint Support Engineer provides dedicated, on-site technical support and endpoint engineering for faculty/staff endpoints as well as specialty arts, media, and performance spaces on the Northeastern University New York City campus. The role combines hands-on lab and studio support with endpoint administration in Jamf Pro and Microsoft Intune. A primary focus of this engagement is migrating lab, studio, and teaching devices onto Northeastern standard management, security, and software delivery, then stabilizing those environments so they run reliably for instruction, production, and performance. The engineer serves as the on-the-ground technical lead for these spaces, working closely with faculty, lab managers, the central Endpoint Engineering team, network and security teams, college technology teams, and on-site ITS staff. The ideal candidate is a self-directed technologist who is equally comfortable building a Jamf or Intune policy, activating a license on a studio workstation, and explaining a fix to a faculty member minutes before class. The role requires sound judgment about what to fix immediately on site and what to route through standard ITS processes. Schedule and business continuity Standard hours are Monday through Friday 8am-5pm, on site in New York City. The role requires occasional early morning, evening, or weekend availability to support term start, scheduled productions and performances, maintenance windows, and urgent issues that block instruction. 2. Minimum Qualifications 3+ years of experience in endpoint administration, desktop engineering, or advanced technical support in a mixed macOS and Windows environment. Hands-on experience administering Jamf Pro, including configuration profiles, policies, smart groups, PreStage enrollment, Self Service, and package deployment. Working experience with Microsoft Intune, including Windows Autopilot, compliance and configuration policies, and Win32 app deployment. Strong macOS troubleshooting skills, including permissions, privacy and security settings (TCC/PPPC), screen sharing and remote management, and OS upgrades. Experience supporting creative, media, or engineering software in a lab or studio environment, including network or per-device license activation. Experience with Apple School/Business Manager and Automated Device Enrollment. Scripting ability in zsh/bash and PowerShell to automate common endpoint tasks. Working knowledge of networking fundamentals (DNS, DHCP, VLANs, firewall ports) sufficient to diagnose license server and remote management connectivity. Experience documenting work in an ITSM platform such as ServiceNow. Strong verbal and written communication skills and the ability to work directly with faculty, students, and non-technical stakeholders. Ability to work on site in New York City 5 days per week and travel between campus buildings. Ability to lift up to 40 lbs, work under desks and in tight spaces, and stand for extended periods. Preferred Qualifications Jamf Certified Admin (JCA) or Jamf Certified Expert (JCE); Microsoft Certified: Endpoint Administrator Associate (MD-102); Apple Certified Support Professional (ACSP). Experience administering Avid Pro Tools, Adobe Admin Console and Creative Cloud packaging, Vectorworks, or Sassafras KeyServer licensing. Familiarity with audio interfaces, MIDI devices, NDI, video capture, and theater or live production technology. Experience with device management migrations, tenant consolidations, or mergers. Experience with Microsoft Defender for Endpoint and Microsoft Entra ID groups and Conditional Access. Experience in a higher education IT environment. 3. Key Responsibilities and Accountabilities Faculty, Staff, Specialty Lab, and Studio Endpoint Support Provide on-site support for faculty/staff, arts, media, audio, design, and performance labs, studios, and teaching spaces, including computer labs, cart rooms, theater and production spaces, and student loaner devices. Install, configure, license, and troubleshoot specialty creative and production software, including Adobe Creative Cloud, Avid Pro Tools, Vectorworks, Final Draft, Isadora, NDI Tools, and subscription audio plugins that require per-device activation. Verify lab and teaching space readiness before each term and before scheduled productions, performances, and events. Respond to in-class and production-critical blockers on site, and coordinate with classroom AV support when issues cross into room technology. Gather software, version, and seat requirements from faculty and lab managers and route new requests through standard ITS intake channels. Endpoint Management and Migration Administer macOS and Windows devices in Jamf Pro and Microsoft Intune, including configuration profiles, policies, smart and dynamic groups, compliance policies, and Self Service catalogs. Migrate devices from legacy management platforms into Northeastern Jamf and Intune tenants, including Apple School/Business Manager reassignment, Automated Device Enrollment, device wipe and re-enrollment, and Windows Autopilot hash collection and group tagging. Package, deploy, and patch applications (macOS PKG/DMG, App Store/VPP, Win32, Microsoft 365) and keep operating systems at consistent, supported versions across lab fleets. Apply Northeastern security baselines, including Microsoft Defender for Endpoint, FileVault, BitLocker, recovery locks, and local admin controls. Diagnose and resolve enrollment, profile, policy, and app delivery failures, and elevate platform-level issues to the central Endpoint Engineering team. Lab Infrastructure and Licensing Support network license and distribution servers for specialty software (for example Avid, Vectorworks, and Sassafras KeyServer), and validate client connectivity to centrally hosted license services. Partner with network, firewall, and identity teams to submit and test port, VLAN, wireless, and access requests that lab software and remote management depend on. Identify, document, and help retire unsupported or insecure legacy servers and equipment in lab spaces and network closets. Maintain accurate hardware and software inventory by room, including seat counts, license terms, and renewal dates. General On-Site Client Support Provide in-person technical support to faculty, staff, and students on the New York City campus, and serve as backup to the on-site Tech Bar during peak periods. Troubleshoot hardware, account access, Microsoft 365, printing, and connectivity issues, and perform device setup, imaging, and hardware swaps. Document all work in ServiceNow, meet incident and request response targets, and elevate to the appropriate ITS teams. Documentation and Knowledge Transfer Create and maintain runbooks, lab build standards, software inventories, and knowledge base articles for each supported space. Transition ongoing lab operations and documentation to permanent ITS staff and the Endpoint Engineering team before the contract ends. Contract Details Term: Full-time 6-month engagement. Northeastern may extend the engagement based on project needs, funding, and performance. Location: On site at the Northeastern University New York City campus. Remote work is limited to approved exceptions. Equipment and access: Northeastern provides required systems access, administrative tooling, and a university-issued device. Management: The contractor takes day-to-day direction from Northeastern leadership and follows ITS change, security, and service management processes. Background check: Candidates must complete a background check before starting. Estimated Min Rate: $60.00 Estimated Max Rate: $70.00 What’s In It for You? Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week) Health Savings Account (HSA) (for employees working 20+ hours per week) Life & Disability Insurance (for employees working 20+ hours per week) MetLife Voluntary Benefits Employee Assistance Program (EAP) 401K Retirement Savings Plan Direct Deposit & weekly epayroll Referral Bonus Programs Certification and training opportunities Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply. Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Visit to contact us if you are an individual with a disability and require accommodation in the application process. For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. #J-18808-Ljbffr Yoh