Endpoint Engineer

ABOUT THE JOB

The ACLU seeks applicants for the full-time position of Endpoint Engineer in the Information Technology Department of the ACLU's National office in New York, NY. This is a hybrid role that has in-office requirements of four (4) days per week or sixteen (16) days per month.

The Information Technology (IT) department provides technology-based services and support for a more than 600-person National staff at our New York, Washington D.C., San Francisco, the Dakotas, Puerto Rico and Durham offices, including staff based in remote locations, and Affiliate offices nationwide that participate in the Affiliate Technology Services program. ACLU IT support staff ensures that business critical services are available to all staff.

This position is part of a collective bargaining unit. It is represented by ACLU Staff United (ASU).
WHAT YOU'LL DO

Reporting to the Director of Service Desk Operations and End-User Experience , the Endpoint Engineer is responsible for the deployment, configuration, security, and proactive management of end-user computing devices including: desktops, laptops, mobile devices, and peripherals. This role ensures endpoints are secure, compliant, reliable, and optimized to support business operations.
YOUR DAY TO DAY

• Proactively manage, maintain, and provide exceptional and timely technical support for ACLU-issued and Bring-Your-Own-Device (BYOD) endpoint devices across the organization. These include but are not limited to Microsoft Windows, Apple MacOS/iOS/iPadOS, and Android
• Deploy and manage endpoint management solutions, e.g., Microsoft Intune for Mobile Device Management (MDM) and Mobile Application Management (MAM), Ninja One, JAMF
• Working with the Infrastructure team, appropriately size, deploy, proactively manage and monitor virtual desktop (VDs), cloud PCs, i.e., Microsoft Azure VD and Microsoft 365
• Manage endpoint security tools (MAM, EDR, antivirus, disk encryption, DLP)
• Configure device policies, profiles, compliance rules, and application deployments
• Monitor endpoint health, performance, and security posture
• Implement OS imaging, provisioning, patching, and update strategies
• Troubleshoot endpoint-related issues escalated from the Service Desk
• Maintain inventory of devices, software, and licenses Support endpoint lifecycle management (onboarding / enrollment, offboarding, refresh, and secure disposal)
• Collaborate with Information Security, Infrastructure, Network Operations, and Service Desk teams to ensure operational best practices, coordinated technical service delivery, issue resolutions, and remediation strategies deployment
• Develop and maintain documentation, standards, and procedures
• Assist with audits and ensure compliance with company and regulatory requirements

FUTURE ACLU'ERS WILL

• Be committed to advancing the mission of the ACLU
• Center and embed the principles of equity, inclusion and belonging in their work by demonstrating commitment to diversity with an approach that respects and values multiple perspectives
• Be committed to work collaboratively and respectfully toward resolving obstacles and conflicts

WHAT YOU'LL BRING

• Extensive experience in endpoint administration or desktop engineering
• Expert knowledge of Windows and MacOS operating platforms including Microsoft Windows 11 and Office 365, MacOS, and Mobile technologies
• Adept at problem-solving, troubleshooting desktop, cloud PC, and mobile device issues, effectively assisting onsite and remote users to resolve issues, involving other members of technical staff as necessary
• Excellent and adaptable communication and documentation skills for technical and non-technical audiences
• Expert knowledge of MDM/MAM tools, i.e., Intune, SCCM, Ninja One, Apple Business Manager
• Experience sizing, deploying, managing, monitoring Azure Virtual Desktop (AVD) and Microsoft 365
• Solid understanding and experience with endpoint security principles and best practices
• Experienced writing, debugging, and deploying scripts and automation tools, e.g., PowerShell, Python, Power Automate, and using code management tools, e.g., GitHub
• Strong knowledge of and experience with Azure AD, Entra ID, identity and access management (IAM) leveraging least privilege principles
• Demonstrated ability to work independently and as part of a team
• Must have strong, reliable home internet service when working remotely
• Must be able to transport moderately heavy objects, e.g., computers and peripherals
• Experience with Zero Trust and modern device management strategies
• Knowledge of and experience with networking fundamentals (DNS, DHCP, VPN)
• Experience supporting remote and hybrid workforces
• Have attained or currently enrolled in training towards obtaining professional industry certifications within six (6) months of employment: Microsoft Endpoint Administrator Associate, JAMF Certified Admin, CompTIA A+, Network+, Security+

COMPENSATION

The ACLU is committed to equity, transparency, and clarity in pay. Consistent with our compensation philosophy, there is a set salary for each role based on geographic work location. The annual salary for this position is $128,294 (Level G) , reflecting the salary of a position based in New York, NY. Salaries are subject to a regional pay adjustment if authorization is granted to work outside of the location listed in this posting.


For details on our pay structure, please visit:
WHY THE ACLU

For over 100 years, the ACLU has worked to defend and preserve the individual rights and liberties guaranteed by the Constitution and laws of the United States. Whether it's ending mass incarceration, achieving full equality for the LGBTQ+ community, establishing new privacy protections for our digital age, or preserving the right to vote or the right to have an abortion, the ACLU takes up the toughest civil liberties cases and issues to defend all people.

We know that great people make a great organization. We value our people and know that what we offer is essential not just their work, but to their overall well-being.


At the ACLU, we offer a broad range of benefits, which include:

• Time away to focus on the things that matter with a generous paid time-off policy
• Focus on your well-being with comprehensive healthcare benefits (including medical, dental and vision coverage, parental leave, gender affirming care & fertility treatment)
• Plan for your retirement with 401k plan and employer match
• We support employee growth and development through annual professional development funds, internal professional development programs and workshops

OUR COMMITMENT TO ACCESSIBILITY, EQUITY, DIVERSITY & INCLUSION

Accessibility, equity, diversity and inclusion are core values of the ACLU and central to our work to advance liberty, equality, and justice for all. For us diversity, equity, accessibility, and inclusion are not just check-the-box activities, but a chance for us to make long-term meaningful change. We are a community committed to learning and growth, humility and grace, transparency and accountability. We believe in a collective responsibility to create a culture of belonging for all people within our organization - one that respects and embraces difference; treats everyone equitably; and empowers our colleagues to do the best work possible. We are as committed to anti-oppression, anti-ableism, and anti-racism internally as we are externally. Because whether we're in the courts or in the office, we believe 'We the People' means all of us.

With this commitment in mind, we strongly encourage applications from all qualified individuals without regard to race, color, religion, gender, sexual orientation, gender identity or expression, age, national origin, marital status, citizenship, disability, veteran status and record of arrest or conviction, or any other characteristic protected by applicable law.


The ACLU is committed to providing reasonable accommodation to individuals with disabilities. If you are a qualified individual with a disability and need assistance applying online, please email View email address on click.appcast.io. If you are selected for an interview, you will receive additional information regarding how to request an accommodation for the interview process.

The Department of Education has determined that employment in this position at the ACLU does not qualify for the Public Service Loan Forgiveness Program.