Endpoint Architect

About the role

The Endpoint Technologies Architect is responsible for designing, implementing, and governing enterprise-scale end-user computing (EUC) environments across physical and virtual endpoints. Primary focus areas include Microsoft Azure Virtual Desktop (AVD) and Windows 365 (W365), with ownership of the full lifecycle for endpoint technologies, ensuring secure, compliant, and consistent user experiences. This role partners closely with security, identity, networking, application, and infrastructure teams and serves as the highest technical escalation for endpoint platforms and Windows 10/11/16.

Key Responsibilities

• Architect, design, and optimize Azure AVD and Windows 365 environments for scalability, performance, resilience, and cost-efficiency.
• Define and maintain architecture standards and best practices for VDI deployment, configuration, security hardening, and lifecycle management.
• Design and provision virtual machines (images, specs, profiles), configure networking/storage/backup, and implement user profiles and access controls.
• Create and maintain comprehensive technical documentation, SOPs, and troubleshooting guides; enable knowledge transfer to support teams.
• Own Microsoft Configuration Manager (SCCM/MECM) platform health and governance: hierarchy design, CMG usage, distribution point strategy, boundary groups, collections, RBAC, and custom reporting.
• Engineer application packaging and deployment, software update management (ADRs), task sequencing/OSD, compliance baselines, and inventory/compliance reporting.
• Lead Modern Management with Microsoft Intune: device enrollment, configuration profiles, compliance policies, update rings/feature flighting, application lifecycle (Win32/MSIX), Autopilot, and co-management scenarios.
• Design a scalable Group Policy framework: authoring, targeting, troubleshooting, change control, and rationalization/migration of legacy GPOs to MDM policies where appropriate.
• Integrate endpoint compliance, patching posture, and security operations across physical devices and AVD/W365 virtual desktops.
• Expert troubleshooting of Windows client OS (Windows 10/11), registry, policy processing, user profiles, and application compatibility.
• PowerShell-first mindset for automation (image/config automation at scale, compliance remediation, reporting, and API integration).
• Strong communication and documentation skills; ability to influence and collaborate across cross-functional teams.
• Project and time management in fast-paced operational environments.

Endpoint Management Responsibilities (SCCM/Intune/Group Policy)

Own Microsoft Configuration Manager (SCCM/MECM) platform health and governance: hierarchy design, CMG usage, distribution point strategy, boundary groups, collections, RBAC, and custom reporting.

Engineer application packaging and deployment, software update management (ADRs), task sequencing/OSD, compliance baselines, and inventory/compliance reporting.

Lead Modern Management with Microsoft Intune: device enrollment, configuration profiles, compliance policies, update rings/feature flighting, application lifecycle (Win32/MSIX), Autopilot, and co-management scenarios.

Design a scalable Group Policy framework: authoring, targeting, troubleshooting, change control, and rationalization/migration of legacy GPOs to MDM policies where appropriate.

Integrate endpoint compliance, patching posture, and security operations across physical devices and AVD/W365 virtual desktops.

Expert troubleshooting of Windows client OS (Windows 10/11), registry, policy processing, user profiles, and application compatibility.

PowerShell-first mindset for automation (image/config automation at scale, compliance remediation, reporting, and API integration).

Qualifications

• Bachelor’s degree in Computer Science or equivalent experience.
• 10+ years supporting Windows client operating systems in enterprise environments.
• 5+ years hands-on experience with virtual desktop platforms.
• Demonstrated experience architecting and operating SCCM/MECM and Microsoft Intune at enterprise scale.
• Proven experience with Group Policy design, governance, troubleshooting, and MDM migration strategies.

Skills

• Expert troubleshooting of Windows client OS (Windows 10/11), registry, policy processing, user profiles, and application compatibility.
• PowerShell-first mindset for automation (image/config automation at scale, compliance remediation, reporting, and API integration).
• Strong communication and documentation skills; ability to influence and collaborate across cross-functional teams.
• Project and time management in fast-paced operational environments.

Benefits

• 401(k) plan with company match.
• Comprehensive medical, dental, and vision insurance.
• Flexible spending and health savings accounts.
• Paid vacation, and sick days.
• Paid parental leave.
• Paid holidays.
• Wellness program.