Senior Endpoint Engineer

Paul Hastings is a leading international law firm that provides innovative legal solutions to many of the world's top financial institutions and Fortune Global 500 companies. With a strong presence throughout the U.S., Asia, Europe, Latin America, and the Middle East, we have the global reach and extensive capabilities to provide personalized service wherever our clients’ needs take us. As one of the world’s leading law firms, we seek dynamic individuals who share our commitment to service, innovation, and professional growth. Job Title Senior Endpoint Engineer Location New York Regular/Temporary Regular Job Description Summary We have an opening for a Senior Endpoint Engineer. Under the direction of the Senior Manager, Endpoint Systems Engineering, the Senior Endpoint Engineer serves as a hands-on technical authority responsible for designing, engineering, and supporting the Firm’s global endpoint ecosystem. This role leads the development of endpoint architectures, application deployment frameworks, and automation strategies that ensure secure, compliant, and high-performing digital workspaces across all offices. The Senior Endpoint Engineer designs and maintains standardized endpoint images, automates patching and application delivery, manages endpoint security configurations, and provides advanced production support using modern platforms such as MECM (Microsoft Endpoint Configuration Manager), Microsoft Intune and Windows Autopilot. This role plays a critical part in the Firm’s ISO 27001 compliance posture, zero-trust security model, and digital transformation initiatives. Serving as a technical lead and escalation point, this position partners closely with Security, Infrastructure, Desktop Support, and business stakeholders to proactively identify issues, engineer scalable solutions, and continuously improve endpoint reliability, performance, and user experience. Job Description In this capacity, the Senior Endpoint Engineer will: Design, develop, and maintain endpoint engineering solutions across Windows, iOS, Android, and VDI (Virtual Desktop Infrastructure) platforms; Create, test, and maintain application install packages and wrappers for delivery via Microsoft Intune, MECM (Microsoft Endpoint Configuration Manager), and VDI environments; Develop and maintain standard endpoint images for supported device models using Windows Autopilot, Intune, and Microsoft Deployment Toolkit (MDT); Automate software deployments, patching, and updates using Intune, PowerShell, and Windows Update for Business; Test integrated applications against standard images, software dependencies, hardware models, and production environments; Patch desktops, laptops, and virtual desktops in alignment with security baselines and compliance requirements; Maintain a centralized software installation and packaging library with version control and documentation; Prepare, test, document, and deploy application updates across Firm systems; Research, evaluate, and recommend