How you'll make an impact:Kymera Therapeutics is seeking a highly capable Desktop Engineer to serve as the L3 escalation point for endpoint and user support within our hybrid Microsoft environment. This role is central to maintaining a secure, reliable, and well-managed computing experience for employees across the organization. The engineer will handle advanced troubleshooting, modern device management with Intune, identity and authentication support, and deep Windows client diagnostics.
The ideal candidate brings a cloud-first mindset, with the judgment and experience to operate effectively in an environment where cloud and on-premises systems still coexist. They should understand the realities and constraints of a hybrid infrastructure while actively helping the organization move toward more modern, cloud-aligned practices. This role requires strong technical instincts, the ability to collaborate across Infrastructure, Cybersecurity, and Applications teams, and a commitment to improving the stability, security, and effectiveness of the end-user computing environment.
Endpoint Management & Intune Support- Package, deploy, and maintain Win32 applications through Microsoft Intune
- Build and update remediation scripts, configuration profiles, and compliance policies
- Troubleshoot Autopilot enrollments, ESP issues, and device identity inconsistencies
- Ensure consistent device hygiene, lifecycle management, and operational readiness
Identity & Access Management- Troubleshoot hybrid identity issues involving Entra ID, Azure AD Connect, and device join states
- Support user and device identity lifecycle processes
- Resolve authentication failures, directory sync issues, and group-based access concerns
- Contribute to identity-related troubleshooting improvements and best practices
Microsoft 365 Support & Escalation- Provide advanced troubleshooting for Exchange Online, Teams, SharePoint, and OneDrive
- Diagnose and resolve mail flow problems, permission conflicts, and policy inconsistencies
- Support configuration and lifecycle management of M365 Groups
- Assist with cross-service issues affecting collaboration and user productivity
Windows Client Engineering- Diagnose OS, driver, performance, profile, and Windows Update issues using advanced tools
- Analyze event logs and system telemetry to determine root causes
- Identify recurring endpoint issues and recommend corrective actions
- Support imaging and Autopilot health by addressing underlying system issues
Scripting & Automation- Develop and maintain PowerShell scripts for support, remediation, and automation
- Use JSON and basic Graph API calls when necessary
- Identify opportunities to reduce manual work and improve consistency
Security & Compliance Support- Apply endpoint hardening practices and configuration standards
- Perform initial triage of endpoint security alerts before escalation
- Work closely with the Cybersecurity team on incident workflows and risk mitigation
- Maintain device and user compliance with organizational policies
Networking & Connectivity Support- Troubleshoot DNS, VPN clients, Wi-Fi issues, and routing-related symptoms
- Determine whether issues originate from the endpoint or the broader network
- Assist users with connectivity problems affecting productivity
Hardware Diagnostics & Warranty Coordination- Use OEM diagnostic tools to identify potential hardware faults
- Distinguish hardware failures from software or configuration issues
- Coordinate RMAs, warranty service requests, and device replacements
- Validate device health and readiness following repair or replacement
Cross-Team Collaboration & Documentation- Act as an escalation point for L1 and L2 support teams
- Document troubleshooting procedures, runbooks, and best practices
- Collaborate with Infrastructure, Cybersecurity, and Applications teams
- Contribute to continuous improvement of endpoint-related processes
Skills and experience you'll bring:- 5+ years supporting Windows endpoints in an enterprise environment
- Experience with Microsoft Intune app deployment, policy management, and device troubleshooting
- Strong troubleshooting skills across OS, identity, and Microsoft 365 services
- PowerShell scripting skills for automation and remediation workflows
- Solid understanding of hybrid Entra ID / Azure AD identity concepts
- Experience diagnosing hardware issues and coordinating warranty repairs
- Familiarity with DNS, VPN, and Wi-Fi troubleshooting
- Strong written and verbal communication skills
Preferred Qualifications- Experience with Defender for Endpoint
- Background in hybrid AD DS + Entra ID environments
- Exposure to regulated industry environments (biotech, pharma, etc.)
- Experience supporting modern endpoint and collaboration ecosystems
Personal Attributes- Analytical, detail-oriented, and methodical approach to problem-solving
- Strong ownership mentality and follow-through on escalated issues
- Comfortable collaborating across technical and non-technical teams
- Committed to delivering a high-quality end-user computing experience
Compensation
- Kymera offers a competitive compensation package that recognizes both results and capabilities through market-based, performance-driven pay.
- The anticipated base salary range for this role is $115,000 - $200,000, with eligibility for annual bonus, equity participation, and comprehensive benefits.
- Actual salary is based on a holistic evaluation of the specific role/level as well as each candidate's depth of experience and the capabilities they bring to the position.
