This is an exciting opportunity to work for one of the top law firms in the U.S.! Davis Wright Tremaine LLP is looking for a Manager, Modern Workplace Engineering to join our team in our Seattle office. This position offers the flexibility to be fully remote while working within reasonable commuting distance from any of our offices. This role is responsible for overseeing and leading the team that designs, supports, secures, and modernizes the firm's End-User Computing (EUC) environment, including desktops, laptops, virtual desktops, mobile devices, application delivery platforms, and user environment technologies. This includes endpoint provisioning, software packaging and deployment, operating system and third-party patching, endpoint policy and security control implementation, virtual desktop services, device lifecycle management, mobile device management, endpoint compliance, monitoring, reporting, and advanced technical escalation response. The Manager, Endpoint Engineering leads a team of five engineers and collaborates with IT leadership and cross-functional technology teams to ensure a secure, stable, efficient, and user-focused digital workplace. The role is accountable for day-to-day operations, project delivery, personnel leadership, standard operating procedures, service health, budgeting, vendor management, and the endpoint technology roadmap. A central responsibility of this position is to lead the firm's transition from legacy, on-premises endpoint management toward cloud-native modern management. The manager will guide the adoption and optimization of Microsoft Intune, Windows Autopilot, cloud-based policy and compliance management, cross-platform endpoint administration, automation, and modern patching while maintaining operational continuity across SCCM/MECM, Group Policy, Ivanti, and other existing technologies during the transition.
On a typical day you will:
Endpoint Engineering and Device Management:
- Oversee the configuration, provisioning, operation, and lifecycle management of all firm-issued desktops, laptops, mobile devices, and virtual desktop environments.
- Manage endpoint platforms and transitional technologies including Microsoft Intune, Windows Autopilot, SCCM/MECM, Microsoft Group Policy, Ivanti Environment Manager, and related management and reporting tools.
- Lead endpoint hardware standards, refresh planning, device replacement, secure retirement, inventory governance, and lifecycle forecasting.
- Develop and maintain monitoring, telemetry, reporting, service-level indicators, and KPIs for endpoint health, compliance, inventory, reliability, and user experience.
Cloud-Native Endpoint Modernization and Strategy:
- Own and execute the endpoint technology roadmap in alignment with the firm's broader cloud strategy and modern workplace objectives.
- Lead the phased transition from SCCM/MECM, traditional imaging, Group Policy, and legacy user environment management toward Microsoft Intune, Windows Autopilot, cloud-based configuration, and modern identity-integrated controls.
- Establish modern management architecture, governance, RBAC, enrollment, configuration, compliance, update, application delivery, and reporting standards for Windows, macOS, iOS, and Android.
- Drive implementation of cloud-based provisioning, including zero-touch and direct-ship deployment models, while preserving a reliable coexistence and rollback strategy during migration.
- Build team proficiency in cloud-native endpoint technologies through structured training, knowledge transfer, documentation, and practical ownership.
Software Packaging, Patch Management, Security, and Compliance:
- Oversee application packaging, compatibility testing, integration, software deployment, version control, and lifecycle management across physical and virtual endpoint platforms.
- Lead operating system, Microsoft application, and third-party application update and patch cycles, balancing security, testing, change control, business continuity, and user impact.
- Partner with the Security Office and Identity Services on endpoint hardening, vulnerability remediation, encryption, Microsoft Defender integrations, device compliance, Conditional Access, Application Protection Policies, device trust, and Zero Trust-aligned access controls.
- Track and remediate endpoint non-compliance, configuration drift, application control exceptions, and security findings using monitoring, alerting, reporting, and automation.
- Ensure endpoint controls support legal, regulatory, client, information governance, and litigation hold requirements as applicable.
Virtual Desktop Infrastructure, Mobility, and User Experience:
- Manage the design, configuration, image lifecycle, entitlements, capacity, performance, and operational health of the firm's virtual desktop services, including VMware Horizon and Azure Virtual Desktop or successor platforms.
- Oversee user profile, personalization, application control, and user environment technologies, including Ivanti and future cloud-based alternatives.
- Evaluate and implement emerging endpoint, virtualization, mobility, Cloud PC, and modern workplace capabilities that improve flexibility, security, resiliency, and employee experience.
Team Leadership, Personnel Management, and Collaboration:
- Provide direct guidance, mentorship, technical leadership, and performance management to a team of five Endpoint Engineers.
- Conduct one-on-one meetings, goal setting, skills development planning, hiring, performance reviews, succession planning, cross-training, and career coaching.
- Set priorities and balance operational support, project commitments, security remediation, modernization activities, and technical debt reduction across the team.
- Collaborate with Security, Networking, Infrastructure, Messaging, Identity Services, Digital Collaboration, Service Desk, Application Services, Information Governance, and project teams to deliver integrated solutions.
- Act as the senior escalation point for endpoint incidents, systemic issues, security events, and technical decisions requiring management oversight.
Processes, Workflows, Documentation, and Service Management:
- Establish and maintain standard operating procedures, architecture records, configuration baselines, deployment workflows, support documentation, inventories, service ownership, and escalation paths.
- Ensure team adherence to firmwide change, incident, problem, release, vulnerability, and project management processes.
- Drive automation-first engineering using PowerShell, APIs, orchestration, and workflow tools to improve consistency, scalability, and supportability.
- Identify and remediate recurring issues, knowledge gaps, single points of failure, and technical debt.
- Define and report service health, risk, capacity, roadmap progress, project status, and modernization outcomes to IT leadership and stakeholders.
Budgeting, Vendor, Project, and Resource Management:
- Participate in annual IT budgeting and multi-year planning for endpoint hardware, software, licensing, professional services, training, and modernization initiatives.
- Manage vendor relationships for endpoint management, desktop hardware, virtual desktop services, application delivery, and related professional services.
- Lead or sponsor endpoint projects, develop business cases, coordinate internal and external resources, manage dependencies and risks, and communicate status to stakeholders.
- Track team capacity and resource utilization and recommend investments that improve security, performance, user experience, resiliency, and cost effectiveness.
Join us if you have:
- Bachelor's Degree
- 8+ years enterprise endpoint engineering, end-user computing, modern workplace, device management, or closely related experience in a medium-to-large enterprise environment.
- 5+ years technical leadership experience with responsibility for endpoint engineering services, production platforms, projects, roadmaps, and operational outcomes; demonstrated ability to motivate and provide meaningful coaching and mentorship to provide top level service within an organization
- 3+ years direct people-management experience, including hiring, coaching, performance management, skills development, succession planning, and leading teams that support a 24/7 customer base.
- Demonstrated experience leading or materially contributing to an enterprise transition from traditional endpoint management toward cloud-native modern management while maintaining operational stability and security.
- Advanced production experience with Microsoft Intune, including enrollment, configuration profiles, compliance policies, endpoint security policies, application deployment, reporting, RBAC, and device lifecycle administration.
- Strong experience designing, implementing, or operating Windows Autopilot provisioning, including enrollment profiles, deployment profiles, hardware registration, application delivery, and zero-touch or direct-ship scenarios.
- Strong experience supporting hybrid and cloud-managed endpoint environments that use Microsoft Intune together with SCCM/MECM during phased migration or co-management.
- Deep knowledge of Windows endpoint engineering, Windows 11, Microsoft 365 Apps, software packaging, application compatibility, software deployment, Windows Update, third-party patching, endpoint telemetry, encryption, and system hardening.
- Experience with Microsoft Entra ID device identities and close partnership with identity and security teams on Conditional Access, device compliance, device trust, MFA, Application Protection Policies, and Zero Trust-aligned controls.
- Experience managing mobile devices and applications across iOS and Android, including enrollment, configuration, compliance, MDM, and MAM or application protection capabilities.
- Experience managing virtual desktop environments and image lifecycles, such as VMware Horizon, Azure Virtual Desktop, Citrix, Windows 365, or comparable enterprise platforms.
- Demonstrated experience with user profile management, user environment management, application control, personalization, Group Policy, and migration of legacy controls toward modern cloud-based alternatives.
- Proficiency with PowerShell and experience using APIs, automation, orchestration, or workflow tools to administer endpoints at scale and reduce manual effort.
- Experience developing endpoint technology roadmaps, architecture standards, operating procedures, service metrics, budgets, vendor strategies, business cases, and project plans.
- Strong organizational and project leadership skills with the ability to manage operational work, major incidents, security remediation, concurrent projects, modernization initiatives, and competing priorities.
- Strong written, verbal, customer interaction, and stakeholder management skills, including the ability to translate business, security, and legal requirements into scalable technical solutions.
- Experience managing macOS through Microsoft Intune or another enterprise Apple management platform, including enrollment, configuration, compliance, patching, application delivery, and Apple Business Manager integration.
- Microsoft certifications in Endpoint Administration, Identity and Access, Security, Microsoft 365, Azure, or comparable modern workplace disciplines; ITIL or equivalent service-management training is also preferred.
- Experience in a law firm, professional services organization, regulated environment, or highly client-service-oriented enterprise, with familiarity supporting confidentiality, information governance, and business continuity requirements.
Who We Are Davis Wright Tremaine LLP is an AmLaw 100 law firm with 9 offices nationwide. We are relentlessly committed to client service and look for candidates who share that commitment. At DWT, client service means having empathy for each client’s and each lawyer’s work and personal pressures, business objectives, and legal needs; anticipating their needs; and having the capabilities and commitment to deliver what matters most to them. What’s in it For You? DWT offers competitive compensation in addition to ample benefits including but not limited to:
- Choice of health and vision insurance plans
- 2 paid volunteer days for qualifying community service work
- Dental plan
- Fertility and adoption benefit
- Paid sabbatical after 13 years of service
- Tuition reimbursement
- Commuter benefits
- Retirement contribution
This job description intends to describe the general nature and level of work being performed by individuals assigned to this position. It is not intended to include all duties and responsibilities.
Washington State The annualized salary range for this position in Washington is $170,000 to $181,000. Actual pay will be adjusted based on the candidate’s education, training, experience and other job-related factors permitted by law. Full time employees may be eligible for a bonus, health insurance with an optional HSA, long term disability, dental insurance, vision care, telemedicine and virtual short term solution based counseling services, life insurance, Healthcare and Dependent Care Flexible Spending Accounts, subsidized backup care and caregiving resources, 401(k), vacation, sick time, 11 paid holidays each year and an employee assistance program. For full-time employees, the initial vacation benefit is 15 days per year and 11 days of sick leave per year, accrued bi-weekly. Additional voluntary programs include: voluntary accident insurance, voluntary life, voluntary disability, voluntary long term care, and pet insurance. Commuter and Transit programs are also available.
Davis Wright Tremaine LLP seeks to hire, develop and grow lawyers and business professionals who combine deep legal expertise, technological fluency, business acumen, and emotional intelligence - creating an excellent, inclusive, adaptive workforce that fuels exceptional client outcomes. At Davis Wright Tremaine LLP, every employee has the right to work in an environment free from all forms of unlawful discrimination. It is our policy to hire, promote, transfer, terminate, and make all employment-related decisions without regard to an employee’s sex (including pregnancy, childbirth, breastfeeding, or related medical condition), race, color, ancestry, sexual orientation, gender, gender identity, gender expression, national origin, religious creed, age, marital status, physical or mental disability, genetic information, medical condition, military condition, military or veteran status or any other basis prohibited by applicable local, state, or federal laws.
Davis Wright Tremaine provides reasonable accommodations for those who need them to complete the application or recruiting process and for employees who need reasonable accommodations to perform the essential functions of their positions due to a disability or for religious reasons. If you need to request accommodation during the application or recruiting process, please email humanresources_confidential@dwt.com.
