Sr Data Engineering and Data Governance Architect

About the role

As a Windows 365 Senior Engineer, you will deploy and support Microsoft-based End User Computing (EUC) solutions, with a primary focus on:

• Windows 365 Cloud PC
• Microsoft Intune
• Microsoft Entra ID
• Windows 11 Standard Operating Environments (SOE)
• Application Packaging and Deployment
• Microsoft Defender
• Endpoint Security and Compliance
• AUTEssential Eight and ISM-aligned security controls

Responsibilities

Windows 365 Solution Delivery

• Deploy Windows 365 Cloud PC solutions for enterprise clients
• Support migrations from traditional desktop, VDI, Citrix, VMware, and Azure Virtual Desktop environments
• Configure provisioning policies, user assignments, images, and Cloud PC lifecycle management
• Assist clients in adopting cloud-native desktop operating models

Microsoft Intune & Endpoint Management

• Implement & maintain Microsoft Intune architectures and management frameworks
• Configure:
• Device compliance policies
• Configuration profiles
• Endpoint security policies
• Conditional Access integrations
• Update management and patching
• Implement & maintain Windows Autopilot deployment solutions
• Support migration from MECM/SCCM and legacy endpoint management platforms to cloud-managed endpoints

Microsoft Entra ID & Identity Integration

• Configure Microsoft Entra ID integrations supporting endpoint access and authentication
• Implement Conditional Access and Zero Trust security controls
• Support identity governance and device-based access controls
• Integrate endpoint compliance with security and access requirements

Windows 11 SOE

• Maintain secure Windows 11 Standard Operating Environments (SOE)
• Security baselines
• Device hardening standards
• Configuration policies
• Build standards and deployment methodologies
• Support enterprise rollout and evergreen upgrade programs

Application Packaging & Deployment

• Packaging and deploying enterprise applications using:
• Win32
• MSI
• EXE
• PowerShell-based deployment methods
• Develop detection rules, deployment rings, rollback strategies, and automation workflows
• Support application testing and remediation activities
• Maintain software deployment standards and governance processes

Security & Compliance

• Implement & maintain endpoint security controls using Microsoft security technologies
• Implement & maintain solutions aligned with:
• AUTEssential Eight
• Information Security Manual (ISM)
• Zero Trust principles
• Microsoft security baselines
• Work with security teams to implement device protection, application control, credential protection, and compliance monitoring
• Support security assessments, audits, and remediation initiatives

Documentation & Delivery

• Produce high-quality technical documentation including:
• Build Guides
• Operational Runbooks
• Support transition from project delivery into managed services and operational support models
• Provide managed services and operational support