End User Compute Architect

This is a fully remote position, open to applicants in India.

📋 Description

• Create the architecture for Microsoft 365 and Exchange Online.

• Develop strategies for cross-tenant synchronization and trust.

• Establish management approaches for mailboxes, shared mailboxes, and users.

• Define policies for Intune, profiles for Autopilot, and designs for device wipe and re-enrollment.

• Design processes for moving devices between tenants, ensuring compliance and adherence to configuration baselines.

• Outline the architecture for XDR and EDR solutions, along with endpoint protection policies.

• Create strategies for patching and software deployment across managed endpoints.

• Develop deployment and management strategies for ZTNA and VPN clients.

• Design the PKI infrastructure, including delegation for certificate authority and issuance of device certificates.

• Establish preventive controls such as application locking and enforcement of MFA.

• Produce both high-level and low-level designs, collaborating with client architects for review.

• Take ownership of the target-state design and the technical approach for transitioning users and devices between tenants.

⛳️ Requirements

• Over 10 years of pertinent experience in end-user compute architecture.

• Extensive experience with Microsoft 365 and Exchange Online.

• Strong background in Microsoft Intune policies and Windows Autopilot.

• Familiarity with device wipe, re-enrollment, and tenant-to-tenant device transitions.

• Experience in cross-tenant synchronization, trust, and management of shared mailboxes.

• Proficiency in mailbox migration and user management.

• Expertise in XDR and EDR solutions, including Microsoft Defender and CrowdStrike.

• Knowledge of patching tools and endpoint software management practices.

• Experienced in ZTNA and VPN client deployment, with exposure to at least two vendors.

• Solid understanding of PKI, including certificate authorities, templates, delegation, and device certificates.

• Experience with preventive controls, such as application locking.

• Familiarity with MFA design and enforcement procedures.

• Working knowledge of Entra ID and hybrid identity as it relates to endpoints.

• Familiarity with at least two cloud service providers (Azure and AWS).

• Exposure to a minimum of two OEMs or vendors in each relevant technology area.

• Prior experience collaborating with UK and EU clients.

• A background in infrastructure, complementing the above specialization.

• Previous involvement in IT consolidations, mergers, demergers, and carve-outs (mandatory).

• Relevant professional certifications are highly recommended.

🏝️ Benefits

• Opportunity for remote work.

• Willingness to travel as necessary.

• Work in alignment with the client’s time zone.