# Associate Director, IT Operations **Company**: Nypl **Work arrangement**: hybrid **Experience**: senior **Job type**: full time **Category**: IT **Industry**: Library **Apply**: https://nypl.pinpointhq.com/en/postings/fb8adbc5-c4b1-4282-9a88-654bed17dbbe?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_ae54d517-86b ## Description The IT Infrastructure and Operations department at The New York Public Library (NYPL) architects, engineers, and transforms technical solutions delivering mission-critical services to Library staff and patrons. This role is central to the modernization of NYPL’s endpoint ecosystem, driving the strategic migration from legacy infrastructures, including Active Directory, Group Policy, and SCCM, to modern, cloud-native platforms like Microsoft Intune and Entra ID. The Associate Director, Endpoint Engineering will oversee the client-facing technology products and services delivered to staff and patrons including, Modern Workplace, Desktop Engineering, and Solutions Engineering. This role is responsible for modernizing and operating NYPL’s staff and public facing endpoint environment, including Windows and macOS devices, and leading the transition to cloud-based device management. ### Expectations Within 1 month, this person will: - Build working relationships with Product Managers, Cybersecurity, and peer IT leaders. - Gain a baseline understanding of the current endpoint environment (Windows, macOS, SCCM, Intune, Jamf). - Meet the team to understand strengths, gaps, and short-term priorities. Within 3 months, this person will: - Complete an assessment and define a phased roadmap for modern MDM-based management. - Assume ownership of assigned desktop and endpoint services, leading the Desktop and Solutions Engineering teams. - Begin driving operational improvements through automation. Within 6 months and beyond, this person will: - Lead execution of the MDM modernization roadmap. - Own the desktop and endpoint services portfolio, partnering with Product Management and Cybersecurity on roadmap prioritization. - Deliver measurable improvements in reliability, security, and operational efficiency. ### Responsibilities - Lead the architecture, deployment, and operation of desktop and endpoint services across Windows and macOS environments. - Provide strategic and operational leadership for the Client Technology Engineering team. - Define endpoint standards for provisioning, patching, configuration, and security baselines, emphasizing automation. - Drive an "automation-first" engineering culture by implementing advanced scripting (PowerShell) and leveraging AI-powered development tools to reduce technical debt and accelerate zero-touch provisioning. - Lead the migration from legacy infrastructure (SCCM/GPO/AD) to modern, cloud-native device management (Intune/Entra ID). - Collaborate with IT Product Management to deliver roadmap initiatives that prioritize service stability and security. - Oversee vendor relationships and product life-cycle management for endpoint technologies. - Communicate status, risks, and architectural decisions to IT leadership and stakeholders. ### Requirements - Bachelor’s Degree required. - 7+ years of progressive, IT endpoint engineering experience. - 5+ years of people management/supervisory experience including coaching, mentoring, and guiding large engineering teams. - Experience utilizing AI-assisted development tools to enhance scripting efficiency and streamline complex endpoint management workflows. - Experience engineering and architecting scalable Windows and macOS endpoint platforms. - Hands-on experience managing Email and productivity systems such as Google Workspace, Microsoft 365, etc. - Experience with vendor evaluation and management, including RFPs and service relationships. ### Skills - Expertise in Windows Architecture, specifically Active Directory, Group Policy, SCCM, and Intune. - Strong leadership experience with modern endpoint management platforms, including Microsoft Intune/Entra ID and Jamf. - Ability to manage multiple, concurrent initiatives while balancing operational stability and modernization. - Solid understanding of endpoint security fundamentals, including device compliance, identity integration, and security baselines. - Advanced proficiency in PowerShell and API-driven automation (e.g., Microsoft Graph) to build scalable, repeatable endpoint solutions. - Ability to improve operational efficiency through automation, standardization, or process improvement. - Familiarity with legacy desktop management tools (e.g., SCCM) and experience planning or executing migrations away from them. - Expertise in architectural problem-solving across endpoint, identity, and device management domains. - Ability to define and track operational metrics (KPIs, SLAs) for endpoint services. - Strong communication and collaboration skills across technical and non-technical teams. ### Benefits - Office setting - Branch library setting. - Physical Duties: Lift/move equipment up to 25 lbs. - Travel to NYPL sites as needed. ### Schedule - Monday-Friday from 9:00am-5:00pm; available on-call after hours and weekends as needed. - Hybrid schedule; 3 days onsite and 2 days remote as workload permits. ## Skills ### Required - Windows Architecture - Active Directory - Group Policy - SCCM - Intune - Jamf - PowerShell - API-driven automation - Microsoft Graph - Endpoint security - Device compliance - Identity integration - Security baselines - Automation - Standardization - Process improvement - Legacy desktop management tools - Architectural problem-solving - Operational metrics --- Source: [Apply at nypl.pinpointhq.com](https://nypl.pinpointhq.com/en/postings/fb8adbc5-c4b1-4282-9a88-654bed17dbbe?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)