Job Description
The Endpoint Architecture Engineer is responsible for defining, designing, and governing the global endpoint management architecture across Windows, macOS, iOS platforms. This role drives the strategic evolution of modern workplace technologies, ensuring secure, scalable, and user-centric endpoint services aligned with enterprise business objectives.
The Endpoint Architecture Engineer acts as the technical authority for endpoint management, identity integration, device security, lifecycle management, automation, and modern workplace transformations while partnering closely with Cybersecurity, Infrastructure, Service Management, and Digital Workplace teams
Key Responsibilities
Endpoint Architecture & Strategy
- Define and maintain the global endpoint architecture roadmap
- Design scalable Endpoint Management solutions using Microsoft Intune, Entra ID, Autopilot, Jamf Pro, and associated technologies.
- Lead the transition from legacy endpoint management solutions toward cloud-native architectures
- Establish endpoint standards, governance models, and design principles
- Evaluate emerging technologies and provide strategic recommendations
Modern Workplace Transformation
- Design and implement Modern Device Management strategies
- Develop architectures supporting native Entra ID joined devices
- Lead large-scale endpoint migration initiatives
- Drive endpoint automation, self-service, and zero-touch provisioning capabilities.
- Support workplace modernization programs and digital employee experience initiatives
Security & Compliance
- Design endpoint security baselines and hardening standards
- Partner with Cybersecurity teams to implement Zero Trust principles
- Define compliance policies, conditional access strategies, and device governance controls
- Ensure alignment with regulatory, privacy, and corporate security requirement
- Review architectural impacts of endpoint-related security initiatives
Platform Ownership
- Govern Microsoft Intune, SCCM, Jamf Pro, Apple Business Manager, and related management platforms
- Define architectural patterns for: Device enrollment Software distribution Patch management Endpoint security Device lifecycle management Remote support Configuration management
- Ensure platform scalability, resilience, and operational excellence
Automation & Integration
- Design integrations with: ServiceNow Microsoft Graph Microsoft 365 Identity Management platforms Security platforms
- Develop automation standards utilizing PowerShell, Graph API, and modern cloud technologies
- Drive reduction of operational overhead through automated workflows
Technical Leadership
- Serve as highest-level technical escalation point for endpoint architecture topics
- Mentor Endpoint Engineers and Platform Administrators
- Lead architecture reviews and technical design sessions
- Provide guidance to project teams and leadership
- Contribute to global technology governance boards
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, or Engineering
- 8+ years of experience in Endpoint Management, Workplace Engineering, or Infrastructure Architecture
- 5+ years of experience with: Microsoft Intune Microsoft Entra ID Microsoft Autopilot Windows 11 Enterprise
Preferred Qualifications
- Microsoft Certified: Endpoint Administrator Associate Enterprise Administrator Expert Cybersecurity Architect Expert
- JAMF and ITIL certifications
- Experience with: DEX platforms (Nexthink, Lakeside) Conditional Access Privileged Access Management Endpoint Detection & Response Azure Automation Microsoft Graph API
- Strong experience with: Jamf Pro Apple Business Manager macOS enterprise management
- Advanced understanding of: Endpoint security Device compliance Identity and access management Zero Trust Architecture
- Experience designing enterprise-scale endpoint solutions for global organizations
