Senior Infrastructure and Systems Engineer

Who we are:Kymera is a clinical-stage biotechnology company pioneering the field of targeted protein degradation (TPD) to develop medicines that address critical health problems and have the potential to dramatically improve patients’ lives. Kymera is deploying TPD to address disease targets and pathways inaccessible with conventional therapeutics. Having advanced the first degrader into the clinic for immunological diseases, Kymera is focused on building an industry-leading pipeline of oral small molecule degraders to provide a new generation of convenient, highly effective therapies for patients with these conditions. Founded in 2016, Kymera has been recognized as one of Boston’s top workplaces for the past several years. For more information about our science, pipeline and people, please visit  or follow us on X (formerly Twitter) or LinkedIn. How we work:PIONEER: We are courageous, resilient and rigorous in our mission to improve patients’ lives through our revolutionary degrader medicines.COLLABORATE: We value trust + transparency from everyone. Our goals are shared, our decisions data-driven and our camaraderie genuine.BELONG: We recognize our differences, inviting curiosity and inclusivity, so that our people are valued, seen, and heard.Kymera Therapeutics is seeking a Senior Infrastructure & Systems Engineer to serve as a technical peer and force multiplier for the Senior Director of Infrastructure & Operations. This role provides technical leadership for the organization's endpoint computing platform and broader infrastructure within a hybrid Microsoft ecosystem, serving as the senior engineering resource responsible for designing, implementing, securing, and optimizing endpoint management technologies while acting as the highest level of technical escalation for complex infrastructure issues.The successful candidate will drive the evolution of Kymera's modern workplace by leveraging Microsoft Intune, Microsoft 365, Entra ID, Windows client engineering, automation, and cloud technologies to deliver secure, scalable, and highly available endpoint services. This position partners closely with Infrastructure, Cybersecurity, Identity, and Enterprise Applications teams to modernize endpoint architecture, improve operational maturity, and implement engineering best practices across the organization.The ideal candidate possesses a cloud-first engineering mindset while maintaining deep expertise across hybrid environments. They understand enterprise systems as interconnected platforms rather than isolated technologies and are comfortable designing solutions that improve security, automation, and user experience across the enterprise. The right candidate operates independently, takes strong ownership of their work, and is committed to reducing single points of failure through automation and documentation.Core ResponsibilitiesEndpoint Engineering and Modern Device ManagementArchitect, implement, and maintain enterprise endpoint management solutions using Microsoft Intune and Company PortalDesign and maintain application deployment strategies utilizing Win32 packaging, Microsoft Store integration, Microsoft 365 Apps, and PowerShell automationDevelop and maintain configuration profiles, compliance policies, security baselines, remediation scripts, and update ringsEngineer and optimize Windows Autopilot deployments including Enrollment Status Page (ESP) configurations, provisioning workflows, Windows Hello for Business, and lifecycle managementDevelop standards for endpoint configuration, provisioning, and device governanceLead initiatives to modernize endpoint management through cloud-native technologiesSupport macOS and iPadOS devices in an enterprise MDM context alongside Windows. A key opportunity within this role is to establish and mature Apple device management practices including MDM enrollment, compliance policies, and lifecycle managementServe as L3 escalation point for the deskside support team, building on prior work rather than re-diagnosing from scratchWindows Systems EngineeringEngineer and support Windows 11 enterprise platforms with a focus on performance, reliability, and securityPerform deep operating system analysis including boot performance, driver architecture, Windows servicing, registry, profile management, and application compatibilityAnalyze Windows internals using Event Viewer, Performance Monitor, ProcMon, Reliability Monitor, ETW traces, and Windows diagnostic toolsLead root cause analysis of recurring endpoint issues and implement permanent engineering solutionsEvaluate new Microsoft technologies and recommend improvements to the enterprise endpoint platformIdentity and Access ManagementAdvanced Active Directory and Entra ID administration in a hybrid environment including Azure AD Connect, conditional access, hybrid join states, and Privileged Identity ManagementOkta and Microsoft Entra ID administration including SSO integrations, enterprise application registrations, user provisioning, MFA policy management, and agent health monitoring across a hybrid identity environmentTroubleshoot complex authentication, synchronization, token, Kerberos, and hybrid identity issues spanning on-premises Active Directory, Entra ID, and OktaSupport identity lifecycle processes for users, devices, and service accountsPartner with Infrastructure and Security teams to strengthen identity governance and Zero Trust initiativesAutomation and ScriptingAdvanced PowerShell scripting and Microsoft Graph API proficiency are core requirements. The environment relies heavily on custom automation across identity, endpoint management, and operational workflows. The candidate must be able to read, maintain, extend, and build complex scripts and Graph API integrations from scratch including Azure Automation runbooks and scheduled operational tasks.Administer and maintain Power Automate flows integrated with SharePoint, Azure Automation, and identity systemsTroubleshoot flow failures, manage connections, and improve existing automation reliabilityBuild reusable automation solutions that improve operational efficiency and reduce manual effortCreate reporting dashboards and health monitoring scripts for endpoint compliance and operational metricsMicrosoft 365 and CollaborationAdvanced Exchange Online administration including mail flow rules, connectors, transport policies, message tracing, and the ability to diagnose and resolve complex email delivery issuesAdvanced SharePoint Online administration including site lifecycle management, permissions, governance, and the ability to research and resolve complex issues independentlyMicrosoft Teams administrationTroubleshoot cross-service Microsoft 365 issues involving authentication, licensing, permissions, and collaboration servicesEndpoint Security EngineeringEngineer endpoint security controls in partnership with the cybersecurity team including Microsoft Defender for Endpoint, Attack Surface Reduction, BitLocker, Windows Firewall, and endpoint hardening standardsPerform initial triage of endpoint and infrastructure security alerts before escalationSupport vulnerability management, compliance reporting, and endpoint security assessmentsParticipate in incident response activities involving endpoint compromise or identity-related threatsHardware LifecycleEstablish standards for enterprise hardware lifecycle managementCoordinate OEM warranty services, vendor escalations, and hardware replacement programsUtilize enterprise diagnostic tools to distinguish hardware, firmware, and operating system issuesEvaluate new endpoint hardware platforms for enterprise deploymentDocumentation and Technical LeadershipAuthor and maintain technical documentation, runbooks, engineering standards, and operational SOPsMentor junior engineers and deskside support staff while promoting engineering best practicesLead root cause analysis efforts and post-incident reviews for critical endpoint issuesDrive continuous service improvement through automation, standardization, and operational maturityWhere You'll ContributeIn addition to core responsibilities, this role contributes across a broad infrastructure stack in collaboration with the wider infrastructure team. While endpoint management and identity remain the primary focus, the successful candidate will bring familiarity with the following areas and engage with them as part of day-to-day operations.Azure InfrastructureParticipate in Azure environment administration including resource groups, virtual networks, and storage accountsManage and maintain Azure Automation runbooks supporting identity and operational workflowsContribute to Azure infrastructure initiatives in collaboration with the broader infrastructure teamNetworkingAssist with Cisco Meraki network administration including switch configuration, VLAN management, and wireless access point managementTroubleshoot DNS, DHCP, VPN, and Wi-Fi connectivity issues affecting endpoints and usersSupport network infrastructure projects including hardware refresh and new site deploymentsFamiliarity with Palo Alto next-generation firewalls is a plusServer and VirtualizationParticipate in VMware ESXi environment administration including VM deployment, configuration, and health monitoringAssist with Windows Server administration including domain controllers, utility servers, and application serversContribute to server patching, lifecycle management, and disaster recovery validationStorageAssist with NetApp ONTAP storage administration as needed including volume management and cluster healthSupport cloud file storage migration and ongoing managementSkills You Must Bring5 to 7 years of hands-on experience specifically in an enterprise infrastructure or systems engineering role, not general IT support. This person needs to contribute immediately without significant onboarding or training.Advanced Intune administration including Win32 app packaging, compliance policies, configuration profiles, remediation scripts, and Autopilot provisioningAdvanced Active Directory and Entra ID administration in a hybrid environment including Azure AD Connect, conditional access, hybrid join states, and Privileged Identity ManagementOkta and Microsoft Entra ID administration including SSO integrations, enterprise application registrations, user provisioning, and MFA policy managementAdvanced PowerShell scripting and Microsoft Graph API proficiencyAdvanced Exchange Online administration including mail flow rules, connectors, transport policies, and message tracingAdvanced SharePoint Online administration including site lifecycle, permissions, and governanceMicrosoft Teams administrationExperience supporting Apple devices including macOS and iPadOS in an enterprise environmentDeep understanding of Windows client architecture, troubleshooting, and enterprise lifecycle managementStrong knowledge of enterprise networking concepts including DNS, DHCP, VPN, and Wi-FiStrong troubleshooting instincts across identity, endpoints, and connectivityFamiliarity with enterprise ITSM platforms for ticket management and documentationAbility to work independently across multiple concurrent workstreamsStrong written and verbal communication skillsSkills That Will Set You ApartAzure administration including resource groups, virtual networks, storage accounts, and Azure Automation runbook managementCisco Meraki network administration including switches, VLANs, and wireless access pointsPalo Alto firewall familiarityVMware ESXi and vSphere administrationNetApp ONTAP familiarityPower Automate and Power Apps experience building and maintaining enterprise flows integrated with SharePoint and Azure AutomationExperience with hybrid Active Directory to Entra ID migrationZoom platform administration including user management, licensing, meeting policies, and Zoom RoomsExperience with Microsoft Defender for Endpoint and Microsoft Defender XDRExperience with Windows Update for Business, Windows Autopatch, and enterprise servicing strategiesBackup and disaster recovery platform experienceApple Business Manager and enterprise Apple MDM platform experience such as Jamf or KandjiExposure to regulated industry environments including biotech, pharma, or life sciencesPersonal AttributesOperates with a high degree of independence and ownershipComfortable managing multiple concurrent workstreams without losing depth on any of themBrings methodical, structured thinking to ambiguous technical problemsUnderstands enterprise systems as interconnected platforms rather than isolated technologiesCommunicates clearly across technical and non-technical audiencesCommitted to reducing single points of failure through documentation and automationReady to contribute immediately