Architect – Enterprise Modern Workplace

This is a fully remote position, open to applicants in Colorado.

📋 Description

• Design, engineer, secure, manage, and continuously enhance enterprise endpoint, identity, and Microsoft 365 ecosystems.

• Offer technical leadership in endpoint management, identity services, collaboration platforms, and cybersecurity initiatives.

• Oversee Active Directory, Microsoft Entra ID, Microsoft Intune, ManageEngine Endpoint Central, Zscaler ZIA/ZPA, Microsoft 365, and Exchange Online.

• Manage identity objects and lifecycle processes, including users, groups, service accounts, organizational units, and attributes.

• Implement Conditional Access, Multi-Factor Authentication, and related identity security measures.

• Set up and sustain endpoint enrollment, provisioning, compliance policies, configuration profiles, and device lifecycle processes.

• Provide support for Defender for Endpoint.

• Handle device patching, software updates, remediation, and application deployment.

• Assist with Zscaler access policies, client connector deployment, secure internet access, and troubleshooting for private application access.

• Manage Microsoft 365 licensing, collaboration services, service health monitoring, and user support.

• Support Exchange Online mailboxes, mail flow, distribution groups, shared mailboxes, permissions, and troubleshooting tasks.

• Deliver advanced technical support while minimizing disruptions to business operations.

• Implement and uphold endpoint and identity security controls.

• Utilize PowerShell and other automation techniques to enhance administration, reporting, remediation, and efficiency.

• Maintain comprehensive technical and operational documentation.

• Collaborate with infrastructure, cybersecurity, networking, service desk, and business teams.

• Provide guidance, training, and knowledge sharing to IT teams and end users.

• Keep accurate records and adhere to Change Management processes.

• Manage ticket volumes and meet response-time SLAs.

• Develop and sustain procedures for secure and consistent operational issue resolution.

• Travel 25% for project support.

• Carry out additional duties as assigned.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience is required.

• Minimum of 7 years of experience in enterprise endpoint management, identity administration, Microsoft 365 administration, or related infrastructure operations.

• Hands-on experience in supporting hybrid identity environments with Active Directory and Microsoft Entra ID.

• Proficiency in configuring and supporting Microsoft Intune, endpoint compliance, device enrollment, application deployment, and patch management.

• Experience with ManageEngine Endpoint Central or similar endpoint patching and device management platforms is highly preferred.

• Familiarity with Zscaler ZIA/ZPA, client connectors, secure internet access, and private application access is preferred.

• Experience administering Microsoft 365 services and Exchange Online, focusing on mailbox management, mail flow, permissions, and collaboration services.

• PowerShell scripting experience is strongly preferred.

• Relevant certifications are advantageous.

• Exceptional troubleshooting and problem-solving capabilities.

• Strong verbal and written communication skills.

• Ability to work effectively within a team-oriented environment and collaborate across infrastructure, cybersecurity, networking, and service desk teams.

• Solid understanding of Active Directory and Microsoft Entra ID administration.

• Knowledge of Conditional Access, Multi-Factor Authentication, identity protection, and best practices for secure access.

• Advanced skills in Microsoft Intune administration.

• Proficiency with ManageEngine Endpoint Central or similar tools.

• Familiarity with Windows, iOS, Android, and macOS.

• Understanding of Zscaler ZIA/ZPA.

• Capability to administer Microsoft 365 and Exchange Online.

• Familiarity with zero trust principles, endpoint security, identity security, and secure configuration standards.

• Basic understanding of networking principles.

• Knowledge of compliance standards and regulations.

• Ability to utilize PowerShell for administration, automation, reporting, troubleshooting, and operational support.

• Competence in developing, implementing, and maintaining policies for endpoint, identity, access, and application management.

• Proficiency in deploying software, updates, and patches.

• Excellent documentation skills.

• Ability to train and support end users and IT teams.

• Capacity to analyze complex technical issues and formulate effective solutions.

• High attention to detail.

• Ability to adapt to new technologies and evolving environments.

• Strong time management skills.

• Commitment to providing outstanding customer service and support to end users.

🏝️ Benefits

• Medical, dental, and vision coverage.

• 401(k) retirement savings options.

• Paid holidays, vacation time, and sick leave.

• Travel privileges on Frontier Airlines and participating partner airlines.

• Buddy passes.

• Travel-related discounts and employee discounts on select products, services, and vendors.

• A hybrid schedule for eligible headquarters roles based in Denver, Colorado.

• Business casual dress options for eligible corporate and support roles.

• Employee support programs and resources, including the HOPE League.