Manager, Modern Workplace Engineering

This is an exciting opportunity to work for one of the top law firms in the U.S.! Davis Wright Tremaine LLP is looking for a Manager, Modern Workplace Engineering to join our team in our Seattle office.

This position offers the flexibility to be fully remote while working within reasonable commuting distance from any of our offices.

This role is responsible for overseeing and leading the team that designs, supports, secures, and modernizes the firm's End-User Computing (EUC) environment, including desktops, laptops, virtual desktops, mobile devices, application delivery platforms, and user environment technologies. This includes endpoint provisioning, software packaging and deployment, operating system and third-party patching, endpoint policy and security control implementation, virtual desktop services, device lifecycle management, mobile device management, endpoint compliance, monitoring, reporting, and advanced technical escalation response.

The Manager, Endpoint Engineering leads a team of five engineers and collaborates with IT leadership and cross-functional technology teams to ensure a secure, stable, efficient, and user-focused digital workplace. The role is accountable for day-to-day operations, project delivery, personnel leadership, standard operating procedures, service health, budgeting, vendor management, and the endpoint technology roadmap.

A central responsibility of this position is to lead the firm's transition from legacy, on-premises endpoint management toward cloud-native modern management. The manager will guide the adoption and optimization of Microsoft Intune, Windows Autopilot, cloud-based policy and compliance management, cross-platform endpoint administration, automation, and modern patching while maintaining operational continuity across SCCM/MECM, Group Policy, Ivanti, and other existing technologies during the transition.

On a typical day you will:

Endpoint Engineering and Device Management:

• Oversee the configuration, provisioning, operation, and lifecycle management of all firm-issued desktops, laptops, mobile devices, and virtual desktop environments.
• Manage endpoint platforms and transitional technologies including Microsoft Intune, Windows Autopilot, SCCM/MECM, Microsoft Group Policy, Ivanti Environment Manager, and related management and reporting tools.
• Lead endpoint hardware standards, refresh planning, device replacement, secure retirement, inventory governance, and lifecycle forecasting.
• Develop and maintain monitoring, telemetry, reporting, service-level indicators, and KPIs for endpoint health, compliance, inventory, reliability, and user experience.

Cloud-Native Endpoint Modernization and Strategy:

• Own and execute the endpoint technology roadmap in alignment with the firm's broader cloud strategy and modern workplace objectives.
• Lead the phased transition from SCCM/MECM, traditional imaging, Group Policy, and legacy user environment management toward Microsoft Intune, Windows Autopilot, cloud-based configuration, and modern identity-integrated controls.
• Establish modern management architecture, governance, RBAC, enrollment, configuration, compliance, update, application delivery, and reporting standards for Windows, macOS, iOS, and Android.
• Drive implementation of cloud-based provisioning, including zero-touch and direct-ship deployment models, while preserving a reliable coexistence and rollback strategy during migration.
• Build team proficiency in cloud-native endpoint technologies through structured training, knowledge transfer, documentation, and practical ownership.

Software Packaging, Patch Management, Security, and Compliance:

• Oversee application packaging, compatibility testing, integration, software deployment, version control, and lifecycle management across physical and virtual endpoint platforms.
• Lead operating system, Microsoft application, and third‑party application update and patch cycles, balancing security, testing, change control, business continuity, and user impact.
• Partner with the Security Office and Identity Services on endpoint hardening, vulnerability remediation, encryption, Microsoft Defender integrations, device compliance, Conditional Access, Application Protection Policies, device trust, and Zero Trust‑aligned access controls.
• Track and remediate endpoint non‑compliance, configuration drift, application control exceptions, and security findings using monitoring, alerting, reporting, and automation.
• Ensure endpoint controls support legal, regulatory, client,…