Associate Director, IT OperationsDepartment: Information Technology
Employment Type: Full Time
Location: Crystal Building 40 W20th St
Reporting To: Jay Haque
Compensation: $155,000 - $175,000 / year
DescriptionOverviewThe IT Infrastructure and Operations department at The New York Public Library (NYPL) is responsible for architecting, engineering, and transforming technical solutions delivering mission-critical services to Library staff and patrons. This role is central to the modernization of NYPL's endpoint ecosystem, driving the strategic migration from legacy infrastructures, including Active Directory, Group Policy, and SCCM, to modern, cloud-native platforms like Microsoft Intune and Entra ID.
The Associate Director, Endpoint Engineering will oversee the client-facing technology products and services delivered to staff and patrons including, Modern Workplace, Desktop Engineering, and Solutions Engineering.This role is responsible for modernizing and operating NYPL's staff and public facing endpoint environment, including Windows and macOS devices, and leading the transition to cloud-based device management.
Some expectations for this role are that within:1 month, this person will:
- Build working relationships with Product Managers, Cybersecurity, and peer IT leaders.
- Gain a baseline understanding of the current endpoint environment (Windows, macOS, SCCM, Intune, Jamf).
- Meet the team to understand strengths, gaps, and short-term priorities.
3 months, this person will:
- Complete an assessment and define a phased roadmap for modern MDM-based management.
- Assume ownership of assigned desktop and endpoint services, leading the Desktop and Solutions Engineering teams.
- Begin driving operational improvements through automation.
6 months and beyond, this person will:
- Lead execution of the MDM modernization roadmap.
- Own the desktop and endpoint services portfolio, partnering with Product Management and Cybersecurity on roadmap prioritization.
- Deliver measurable improvements in reliability, security, and operational efficiency.
Responsibilities- Lead the architecture, deployment, and operation of desktop and endpoint services across Windows and macOS environments
- Provide strategic and operational leadership for the Client Technology Engineering team
- Define endpoint standards for provisioning, patching, configuration, and security baselines, emphasizing automation
- Drive an "automation-first" engineering culture by implementing advanced scripting (PowerShell) and leveraging AI-powered development tools to reduce technical debt and accelerate zero-touch provisioning
- Lead the migration from legacy infrastructure (SCCM/GPO/AD) to modern, cloud-native device management (Intune/Entra ID)
- Collaborate with IT Product Management to deliver roadmap initiatives that prioritize service stability and security
- Oversee vendor relationships and product life-cycle management for endpoint technologies
- Communicate status, risks, and architectural decisions to IT leadership and stakeholders
- Perform other related duties as assigned
Required Education, Experience & SkillsRequired Education & Certifications- Bachelor's Degree required
Required Experience- 7+ years of progressive, IT endpoint engineering experience
- 5+ years of people management/supervisory experience including coaching, mentoring, and guiding large engineering teams
- Experience utilizing AI-assisted development tools to enhance scripting efficiency and streamline complex endpoint management workflows
- Experience engineering and architecting scalable Windows and macOS endpoint platforms
- Hands-on experience managing Email and productivity systems such as Google Workspace, Microsoft 365, etc
- Experience with vendor evaluation and management, including RFPs and service relationships
Required Skills- Expertise in Windows Architecture, specifically Active Directory, Group Policy, SCCM, and Intune
- Strong leadership experience with modern endpoint management platforms, including Microsoft Intune/Entra ID and Jamf
- Ability to manage multiple, concurrent initiatives while balancing operational stability and modernization
- Solid understanding of endpoint security fundamentals, including device compliance, identity integration, and security baselines
- Advanced proficiency in PowerShell and API-driven automation (e.g., Microsoft Graph) to build scalable, repeatable endpoint solutions
- Ability to improve operational efficiency through automation, standardization, or process improvement.
- Familiarity with legacy desktop management tools (e.g., SCCM) and experience planning or executing migrations away from them
- Expertise in architectural problem-solving across endpoint, identity, and device management domains
- Ability to define and track operational metrics (KPIs, SLAs) for endpoint services.
- Strong communication and collaboration skills across technical and non-technical teams
Managerial/Supervisory Responsibilities- Lead a team of approximately 9 staff; mentoring, coaching, planning, and execution
More...Core ValuesAll team members are expected and encouraged to embody the NYPL Core Values:
- Be Helpful to patrons and colleagues
- Be Resourceful in solving problems
- Be Curious in all aspects of your work
- Be Welcoming and Inclusive
Work Environment- Office setting
- Branch library setting
Physical Duties- Lift/move equipment up to 25 lbs
- Travel to NYPL sites as needed
Pre-PlacementPhysical Required?No
Union/Non UnionFLSA StatusSchedule- Monday-Friday from 9:00am-5:00pm; available on-call after hours and weekends as needed
- Hybrid schedule; 3 days onsite and 2 days remote as workload permits
This job description represents the types and levels of responsibilities that will be required of the position and shall not be construed as a declaration of all of the specific duties and responsibilities for the role. Job duties may change if Library priorities change. Employees may be directed to perform job-related tasks other than those specifically presented in this description as needed.
Union Salaries are determined by collective bargaining agreement(s).
