About the job
The ACLU is excited to announce an opening for a full-time Endpoint Engineer within the Information Technology Department at our National office located in New York, NY. This role is hybrid, requiring in-office attendance four (4) days per week or sixteen (16) days per month.
Our IT department delivers essential technology services and support to a dedicated national staff of over 600 across various locations, including New York, Washington D. C., San Francisco, the Dakotas, Puerto Rico, and Durham. We also support remote staff and Affiliate offices nationwide, enhancing their technology capabilities through our Affiliate Technology Services program. The ACLU IT support team ensures that critical business services remain accessible to all staff.
This position is part of a collective bargaining unit, represented by ACLU Staff United (ASU).
WHAT YOU'LL DO
Reporting to the Director of Service Desk Operations and End-User Experience, the Endpoint Engineer will oversee the deployment, configuration, security, and proactive management of end-user computing devices, which include desktops, laptops, mobile devices, and peripherals. This role is pivotal in ensuring that endpoints are secure, compliant, reliable, and optimized to support our organizational operations.
YOUR DAY TO DAY
- Proactively manage, maintain, and provide exceptional technical support for ACLU-issued and Bring-Your-Own-Device (BYOD) endpoint devices across the organization, including but not limited to Microsoft Windows, Apple MacOS/iOS/iPadOS, and Android.
- Deploy and manage endpoint management solutions such as Microsoft Intune for Mobile Device Management (MDM), Mobile Application Management (MAM), Ninja One, and JAMF.
- Collaborate with the Infrastructure team to appropriately size, deploy, and monitor virtual desktops (VDs) and cloud PCs, including Microsoft Azure VD and Microsoft 365.
- Oversee endpoint security tools, including MAM, EDR, antivirus solutions, disk encryption, and Data Loss Prevention (DLP).
- Configure device policies, profiles, compliance rules, and application deployments.
- Monitor endpoint health, performance, and security posture.

