Desktop Engineer

Kymera is a clinical-stage biotechnology company pioneering the field of targeted protein degradation (TPD) to develop medicines that address critical health problems and have the potential to dramatically improve patients’ lives. Kymera is deploying TPD to address disease targets and pathways inaccessible with conventional therapeutics. Having advanced the first degrader into the clinic for immunological diseases, Kymera is focused on building an industry-leading pipeline of oral small molecule degraders to provide a new generation of convenient, highly effective therapies for patients with these conditions. Founded in 2016, Kymera has been recognized as one of Boston’s top workplaces for the past several years. For more information about our science, pipeline and people, please visit www.kymeratx.com or follow us on X (formerly Twitter) or LinkedIn. 

• PIONEER: We are courageous, resilient and rigorous in our mission to improve patients’ lives through our revolutionary degrader medicines.
• COLLABORATE: We value trust + transparency from everyone. Our goals are shared, our decisions data-driven and our camaraderie genuine.
• BELONG: We recognize our differences, inviting curiosity and inclusivity, so that our people are valued, seen, and heard.

Kymera Therapeutics is seeking a highly capable Desktop Engineer to serve as the L3 escalation point for endpoint and user support within our hybrid Microsoft environment. This role is central to maintaining a secure, reliable, and well-managed computing experience for employees across the organization. The engineer will handle advanced troubleshooting, modern device management with Intune, identity and authentication support, and deep Windows client diagnostics.

The ideal candidate brings a cloud-first mindset, with the judgment and experience to operate effectively in an environment where cloud and on-premises systems still coexist. They should understand the realities and constraints of a hybrid infrastructure while actively helping the organization move toward more modern, cloud-aligned practices. This role requires strong technical instincts, the ability to collaborate across Infrastructure, Cybersecurity, and Applications teams, and a commitment to improving the stability, security, and effectiveness of the end-user computing environment.

Endpoint Management & Intune Support

• Package, deploy, and maintain Win32 applications through Microsoft Intune
• Build and update remediation scripts, configuration profiles, and compliance policies
• Troubleshoot Autopilot enrollments, ESP issues, and device identity inconsistencies
• Ensure consistent device hygiene, lifecycle management, and operational readiness

Identity & Access Management

• Troubleshoot hybrid identity issues involving Entra ID, Azure AD Connect, and device join states
• Support user and device identity lifecycle processes
• Resolve authentication failures, directory sync issues, and group-based access concerns
• Contribute to identity-related troubleshooting improvements and best practices

Microsoft 365 Support & Escalation

• Provide advanced troubleshooting for Exchange Online, Teams, SharePoint, and OneDrive
• Diagnose and resolve mail flow problems, permission conflicts, and policy inconsistencies
• Support configuration and lifecycle management of M365 Groups
• Assist with cross-service issues affecting collaboration and user productivity

Windows Client Engineering

• Diagnose OS, driver, performance, profile, and Windows Update issues using advanced tools
• Analyze event logs and system telemetry to determine root causes
• Identify recurring endpoint issues and recommend corrective actions
• Support imaging and Autopilot health by addressing underlying system issues

Scripting & Automation

• Develop and maintain PowerShell scripts for support, remediation, and automation
• Use JSON and basic Graph API calls when necessary
• Identify opportunities to reduce manual work and improve consistency

Security & Compliance Support

• Apply endpoint hardening practices and configuration standards
• Perform initial triage of endpoint security alerts before escalation
• Work closely with the Cybersecurity team on incident workflows and risk mitigation
• Maintain device and user compliance with organizational policies

Networking & Connectivity Support

• Troubleshoot DNS, VPN clients, Wi-Fi issues, and routing-related symptoms
• Determine whether issues originate from the endpoint or the broader network
• Assist users with connectivity problems affecting productivity

Hardware Diagnostics & Warranty Coordination

• Use OEM diagnostic tools to identify potential hardware faults
• Distinguish hardware failures from software or configuration issues
• Coordinate RMAs, warranty service requests, and device replacements
• Validate device health and readiness following repair or replacement

Cross-Team Collaboration & Documentation

• Act as an escalation point for L1 and L2 support teams
• Document troubleshooting procedures, runbooks, and best practices
• Collaborate with Infrastructure, Cybersecurity, and Applications teams
• Contribute to continuous improvement of endpoint-related processes

• 5+ years supporting Windows endpoints in an enterprise environment
• Experience with Microsoft Intune app deployment, policy management, and device troubleshooting
• Strong troubleshooting skills across OS, identity, and Microsoft 365 services
• PowerShell scripting skills for automation and remediation workflows
• Solid understanding of hybrid Entra ID / Azure AD identity concepts
• Experience diagnosing hardware issues and coordinating warranty repairs
• Familiarity with DNS, VPN, and Wi-Fi troubleshooting
• Strong written and verbal communication skills

Preferred Qualifications

• Experience with Defender for Endpoint
• Background in hybrid AD DS + Entra ID environments
• Exposure to regulated industry environments (biotech, pharma, etc.)
• Experience supporting modern endpoint and collaboration ecosystems

Personal Attributes

• Analytical, detail-oriented, and methodical approach to problem-solving
• Strong ownership mentality and follow-through on escalated issues
• Comfortable collaborating across technical and non-technical teams
• Committed to delivering a high-quality end-user computing experience

Kymera Therapeutics is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment.  All applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, pregnancy, sex, marital status, gender expression or identity, genetic information, sexual orientation, citizenship, or any other legally protected class.

Compensation

• Kymera offers a competitive compensation package that recognizes both results and capabilities through market-based, performance-driven pay.
• The anticipated base salary range for this role is $115,000 – $200,000, with eligibility for annual bonus, equity participation, and comprehensive benefits.
• Actual salary is based on a holistic evaluation of the specific role/level as well as each candidate’s depth of experience and the capabilities they bring to the position.