{"id":1103372,"url":"https://alion.io/job/allogene-therapeutics-desktop-engineer-contractor","title":"Desktop Engineer (Contractor)","company":{"id":449650,"name":"Allogene Therapeutics","domain":"allogene.com","url":"https://alion.io/company/allogene-therapeutics","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JobScore","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["South San Francisco, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":55,"max":65,"currency":"USD","period":"hour","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Service Desk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Least Privilege","optional":true},{"name":"PowerShell","optional":true},{"name":"Wi-Fi","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-18T19:40:59Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-29T03:32:37Z","board_verified":true,"closed_at":null,"days_open":40,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":40},"description":"About Allogene:\nAllogene Therapeutics, with headquarters in South San Francisco, is a clinical-stage biotechnology company pioneering the development of allogeneic chimeric antigen receptor T cell (AlloCAR T) products for cancer and autoimmune disease. Led by a management team with significant experience in cell therapy, Allogene is developing a pipeline of “off-the-shelf” CAR T cell product candidates with the goal of delivering readily available cell therapy on-demand, more reliably, and at greater scale to more patients.\nAbout the role:\nWe are seeking an experienced Desktop Engineer to manage and support the organization’s endpoint and workplace technology environment across Windows and macOS devices. This role owns day-to-day endpoint operations and helps ensure corporate laptops and desktops remain secure, compliant, patched, reliable, and productive within a Microsoft-centric environment.\nThe successful candidate will combine strong endpoint engineering skills with a hands-on, customer-focused support approach. This role is a tier 3 escalation.\nThe role can be based remote or can be based onsite at the South San Francisco offices.\nResponsibilities:\nEndpoint Management and Configuration\nAdminister and maintain enterprise desktop management platforms for Windows and macOS devices without dependency on a single technology or vendor.\nDevelop, implement, and maintain device standards, security baselines, configuration profiles, compliance policies, and enrollment settings.\nManage the complete endpoint lifecycle, including procurement coordination, enrollment, provisioning, deployment, refresh, reassignment, and secure retirement.\nMonitor endpoint health and compliance, investigate configuration drift, and remediate devices that fall outside established standards.\nAutomate repeatable deployment and configuration activities using appropriate scripting and administration methods.\nSoftware Deployment and Application Management\nPackaging, testing, deployment, maintenance, and removal of windows/third party applications across supported endpoint platforms. Experience with Microsoft Intune, JAMF, and Automox are considered an additional qualification.\nMaintain standard application catalogs and self-service delivery capabilities where appropriate.\nCoordinate application upgrades, compatibility testing, licensing considerations, and rollout communications.\nTroubleshoot failed installations, application conflicts, performance issues, and deployment errors.\nPatch and Vulnerability Management\nPlan and execute operating system, browser, firmware, driver, and third-party application patching based on defined maintenance schedules and risk priorities.\nMonitor patch deployment success, investigate failures, and drive remediation of noncompliant or vulnerable endpoints.\nCoordinate urgent security updates and out-of-band maintenance in partnership with Information Security and Infrastructure teams.\nEndpoint Security and Compliance\nImplement and maintain endpoint security settings, including encryption, host firewall, local privilege controls, device restrictions, authentication-related configurations, and approved security baselines.\nPartner with Information Security to investigate endpoint alerts, remediate vulnerabilities, support incident response, and reduce endpoint risk.\nApply configuration and software changes through documented testing, approval, deployment, validation, and rollback practices.\nMicrosoft 365 and Identity-Integrated Workplace Support\nConfigure and support Microsoft 365 settings that affect endpoint access, productivity, collaboration, device compliance, and the end-user experience.\nTroubleshoot endpoint integration with cloud identity, authentication, productivity applications, collaboration services, email, file access, and device compliance controls.\nSupport user onboarding and offboarding activities, including device readiness, application access, licensing coordination, profile configuration, and secure device return.\nWork with Security and Infrastructure teams on access policies, authentication requirements, device trust, and other identity-integrated controls.\nNew Hire Onboarding Support\nPartner with Human Resources, hiring managers, and the Service Desk to ensure new hire technology needs are identified, ordered, and ready before the employee start date.\nPrepare, image, enroll, and configure new hire laptops, desktops, peripherals, and mobile devices to established standards, security baselines, and role-based requirements.\nProvision accounts, licensing, group membership, application access, email, file access, and collaboration tools in coordination with Security and Infrastructure teams.\nAutomate onboarding wherever technically feasible, including zero-touch device provisioning and enrollment, automated account, group, and license assignment, scripted application and configuration delivery, and self-service setup, so that manual steps are the exception rather than the standard.\nDeliver new hire technology orientation, including device setup, multifactor authentication enrollment, and self-service support resources, etc.\nProvide day-one and first-week support for new hires, resolve setup issues promptly, and verify device compliance and enrollment after deployment.\nMaintain onboarding checklists, build documentation, automation scripts, and standard device configurations, and continuously reduce manual effort and handoffs as tooling and business needs change.\nOnsite Hardware, Network, and Workplace Support\nBe readily available to provide onsite support at the South San Francisco or Newark, California offices as business needs require.\nDiagnose and resolve laptop, desktop, monitor, peripheral, printer, and other hardware or software issues requiring physical access.\nTroubleshoot user connectivity issues involving wired and wireless networks, VPN access, DNS, DHCP, TCP/IP, and local office infrastructure.\nSupport conference rooms, audiovisual equipment, collaboration spaces, and other workplace technology.\nCoordinate with Network, Infrastructure, Facilities, Security, and external service providers during office projects, technology deployments, outages, and incidents.\nProvide responsive support for executives, critical business operations, and time-sensitive onsite issues.\nExperiences with Boiotech industries, handling lab equipment's is considered an additional qualification\nService Desk Escalation and Surge Support\nServe as a Tier 3 escalation resource for complex endpoint, application, hardware, identity, and connectivity issues.\nAssist the Service Desk during periods of increased support volume, employee onboarding, device refreshes, office events, outages, or major technology changes.\nCommunicate clearly with end users, set expectations, document troubleshooting activity, and ensure appropriate follow-through and closure.\nIdentify recurring issues and convert them into standard fixes, knowledge articles, automation, or preventive controls.\nProjects, Vendors, and Continuous Improvement\nLead or contribute to endpoint modernization, security, lifecycle, patching, and workplace technology projects.\nParticipate in vendor evaluations, endpoint management RFPs, Statements of Work, implementation planning, service transitions, and ongoing provider oversight.\nCollaborate with managed service providers and technology partners while retaining internal ownership of standards, approvals, quality, and outcomes.\nDevelop and maintain technical documentation, standard operating procedures, support guides, configuration records, and operational runbooks.\nRecommend improvements that strengthen security, reliability, automation, supportability, and the end-user experience.\nPerform other responsibilities as assigned based on individual skills and experience; because the team is small, this role will be expected to assist with networking, security, and server administration as needed.\nRequirements:\nFive or more years of experience in desktop engineering, endpoint administration, or enterprise end-user computing support.\nHands-on experience managing Windows and macOS devices in a Microsoft-centric enterprise environment.\nExperience with modern desktop management platforms for device enrollment, configuration, compliance, software deployment, inventory, and remote administration.\nExperience with operating system and third-party application patch management, vulnerability remediation, and deployment troubleshooting.\nExperience configuring and supporting Microsoft 365 settings and endpoint integrations with cloud identity and collaboration services.\nStrong troubleshooting skills across endpoint operating systems, applications, hardware, authentication, and network connectivity.\nAbility and willingness to be readily available onsite in South San Francisco or Newark, California, as needed.\nStrong customer service, documentation, communication, prioritization, and cross-functional collaboration skills.\nPreferred Qualifications:\nWorking knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, Wi-Fi, VPN, routing, switching, and systematic network troubleshooting.\nExperience supporting security baselines, encryption, device compliance, conditional access concepts, least privilege, and zero trust initiatives.\nExperience with PowerShell, shell scripting, or other automation methods used in endpoint administration.\nExperience supporting conference room technology, audiovisual systems, printers, and hybrid meeting environments.\nExperience in a regulated environment and familiarity with formal change management, audit evidence, and documented operational controls.\nRelevant industry or platform certifications are helpful but not required.\nCore Competencies:\nEndpoint lifecycle management and desktop engineering\nWindows and macOS administration\nSoftware packaging, deployment, and application lifecycle management\nConfiguration, compliance, patch, and vulnerability management\nMicrosoft 365 and identity-integrated endpoint support\nHardware, network, and workplace technology troubleshooting\nAutomation, documentation, and process improvement\nThis position supports a remote or hybrid workplace. Occasional after-hours work may be required for planned maintenance, urgent patching, major deployments, or critical incidents. Candidates must be authorized to work in the U.S. This is a 6 month contract opportunity with the possibility of extension or contract-to-hire.\nWe offer a chance to work with talented people in a collaborative environment and provide a top-notch compensation. The expected hourly range for this role is $55 to $65 per hour. Actual pay will be determined based on experience, qualifications, geographic location, business needs, and other job-related factors permitted by law.\nAs an equal opportunity employer, Allogene is committed to a diverse workforce. Employment decisions regarding recruitment and selection will be made without discrimination based on race, color, religion, national origin, gender, age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job-related characteristics or other prohibited grounds specified in applicable federal, state and local laws. We also embrace differences in experience and background, and welcome diversity of opinions and thought with active recruitment and internships designed to create a stronger and better Allogene that is focused on developing life-changing products for patients.\n#LI-remote #LI-TF1","description_format":"text","description_chars":11553,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cell & Gene Therapy","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-09-22T02:42:23Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":1,"median_offered_wage_usd":205000,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.736,"p_room":0.9,"age_days":40,"expected_fill_days":63,"reasons":["conf:2","win:mid"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":false},"html_url":"https://alion.io/job/allogene-therapeutics-desktop-engineer-contractor","json_url":"https://alion.io/job/allogene-therapeutics-desktop-engineer-contractor.json","meta":{"generated_at":"2026-10-29T07:22:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11181,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449650},"rest":"https://alion.io/mcp/rest/get_company?id=449650"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallogene-therapeutics-desktop-engineer-contractor"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallogene-therapeutics-desktop-engineer-contractor"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallogene-therapeutics-desktop-engineer-contractor"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allogene-therapeutics-desktop-engineer-contractor\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallogene-therapeutics-desktop-engineer-contractor"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1103372}},{"tool":"search_jobs","arguments":{"company":"allogene.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1103372},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}