Associate Director, Endpoint Engineering

Associate Director, IT Operations

The IT Infrastructure and Operations department at The New York Public Library (NYPL) is responsible for architecting, engineering, and transforming technical solutions delivering mission-critical services to Library staff and patrons. This role is central to the modernization of NYPL's endpoint ecosystem, driving the strategic migration from legacy infrastructures, including Active Directory, Group Policy, and SCCM, to modern, cloud-native platforms like Microsoft Intune and Entra  Associate Director, Endpoint Engineering will oversee the client-facing technology products and services delivered to staff and patrons including, Modern Workplace, Desktop Engineering, and Solutions Engineering.

This role is responsible for modernizing and operating NYPL's staff and public facing endpoint environment, including Windows and macOS devices, and leading the transition to cloud-based device management.

Some expectations for this role are that within:

• 1 month, this person will:
• Build working relationships with Product Managers, Cybersecurity, and peer IT leaders.
• Gain a baseline understanding of the current endpoint environment (Windows, macOS, SCCM, Intune, Jamf).
• Meet the team to understand strengths, gaps, and short-term priorities.
• 3 months, this person will:
• Complete an assessment and define a phased roadmap for modern MDM-based management.
• Assume ownership of assigned desktop and endpoint services, leading the Desktop and Solutions Engineering teams.
• Begin driving operational improvements through automation.
• 6 months and beyond, this person will:
• Lead execution of the MDM modernization roadmap.
• Own the desktop and endpoint services portfolio, partnering with Product Management and Cybersecurity on roadmap prioritization.
• Deliver measurable improvements in reliability, security, and operational efficiency.

Responsibilities:

• Lead the architecture, deployment, and operation of desktop and endpoint services across Windows and macOS environments
• Provide strategic and operational leadership for the Client Technology Engineering team
• Define endpoint standards for provisioning, patching, configuration, and security baselines, emphasizing automation
• Drive an "automation-first" engineering culture by implementing advanced scripting (Power Shell) and leveraging AI-powered development tools to reduce technical debt and accelerate zero-touch provisioning
• Lead the migration from legacy infrastructure (SCCM/GPO/AD) to modern, cloud-native device management (Intune/Entra )
• Collaborate with IT Product Management to deliver roadmap initiatives that prioritize service stability and security
• Oversee vendor relationships and product life-cycle management for endpoint technologies
• Communicate status, risks, and architectural decisions to IT leadership and stakeholders
• Perform other related duties as assigned

Required Education &

Certifications:

• Bachelor's Degree required

Required Experience:

• 7+ years of progressive, IT endpoint engineering experience
• 5+ years of people management/supervisory experience including coaching, mentoring, and guiding large engineering teams
• Experience utilizing AI-assisted development tools to enhance scripting efficiency and streamline complex endpoint management workflows
• Experience engineering and architecting scalable Windows and macOS endpoint platforms
• Hands-on experience managing Email and productivity systems such as Google Workspace, Microsoft 365, etc
• Experience with vendor evaluation and management, including RFPs and service relationships

Required Skills:

• Expertise in Windows Architecture, specifically Active Directory, Group Policy, SCCM, and Intune
• Strong leadership experience with modern endpoint management platforms, including Microsoft Intune/Entra  Jamf
• Ability to manage multiple, concurrent initiatives while balancing operational stability and modernization
• Solid understanding of endpoint security fundamentals, including device compliance, identity integration, and security baselines
• Advanced proficiency in Power Shell and API-driven automation (e.g., Microsoft Graph) to build scalable, repeatable endpoint solutions
• Ability to improve…