Director, Enterprise Platform Engineering (Windows Endpoint)

About the role

This position serves as the senior leader accountable for the strategy, engineering, and operational excellence of our global Windows Endpoint ecosystem—physical devices (Windows 10/11), hardware, peripherals, virtual desktops (Azure Virtual Desktop), and the supporting management platforms (Intune, Autopilot, GPO modernization, endpoint security, and automation).

Core Responsibilities

• Strategic Leadership & Vision

• Define and execute the multi-year strategy for the Windows endpoint physical and virtual ecosystem – HW, AVD, Intune, application delivery, automation, updates, and security posture.
• Serve as the enterprise authority on Windows client engineering, hardware, modern endpoint management, virtualization strategy, and platform modernization.
• Establish technology roadmaps for Windows 11, cloud-managed device models, virtualization, and future workplace experience capabilities.
• Partner with senior engineering, security, compliance, risk, support, network, collaboration, procurement, and business stakeholders.

• Engineering Ownership & Platform Excellence

• Lead engineering teams responsible for: Windows 10/11 platform engineering, Azure Virtual Desktop architecture & operations, Intune / AutoPilot / Endpoint Manager governance & policy design, Application packaging/delivery & automation, Firmware/BIOS, hardware standards, driver lifecycle, and performance optimization.
• Oversee zero-touch provisioning, configuration baselines, CIS/SOX/PCI compliance enforcement, endpoint telemetry, and health & reliability engineering.
• Mature the platform-as-a-product operating model—including roadmap, release management, KPIs, SLIs/SLOs, and user-experience score improvements.

• Operational Excellence

• Ensure consistent global performance across tens of thousands of endpoints, meeting aggressive availability, reliability, and MTTR targets.
• Strengthen the L2/L3 engineering/operations partnership and reduce engineering RUN burden to
• Reduce incident volume through standardization, automation, and elimination of manual and legacy workflows.
• Maintain accountability for patching, quality updates, security posture, and platform hardening.

• Organizational Leadership & People Management

• Lead, mentor, and develop a high-performing multi-discipline engineering organization (Managers, Architects, Senior Engineers, Platform Engineers).
• Create an environment that attracts top talent and maintains high engagement, while elevating engineering excellence and operational discipline.

• Enterprise Partnership & Governance

• Ensure alignment with enterprise architecture, cyber security, risk & compliance, infrastructure, and cloud platform strategies.
• Oversee architecture reviews (ARB/MCC/SARB), change governance, and approval workflows for new technologies or platform changes.
• Provide executive-level communication for incidents, risks, regulatory concerns, platform change impacts, and roadmap initiatives.

Qualifications

• 10+ years of progressive experience leading large-scale endpoint engineering or infrastructure teams; 5+ years leading leaders.
• Deep expertise in: Windows 10/11 platform engineering at enterprise scale, Microsoft Intune/Endpoint Manager, Desktop, Laptop, and peripheral hardware, Autopilot, GPO modernization, Azure Virtual Desktop or enterprise VDI environments, Endpoint security frameworks, CIS baselines, Zero Trust principles, Automation (PowerShell, Graph API, CI/CD pipelines).
• Demonstrated success operating a large-scale fleet (>20k devices) with globally distributed teams.
• Strong command of enterprise operations, major incident management, and engineering KPI/OKR constructs.
• Proven ability to influence senior stakeholders, lead through ambiguity, and deliver measurable business outcomes.

Preferred skills

• Experience in regulated industries (financial services, insurance, healthcare).
• Modern Workplace & Microsoft certifications (MDM/Intune, Windows, Azure).
• Experience with Mac, mobile, or cross-platform endpoint architecture.
• Familiarity with SCCM/ConfigMgr coexistence and cloud transition strategies.