EUC Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership and manage the enterprise EUC and endpoint management roadmap for both Windows and macOS platforms.

• Design and implement Microsoft Intune, SCCM/MECM, and Jamf Pro environments.

• Spearhead modernization and co-management projects transitioning from SCCM to Intune.

• Create provisioning strategies utilizing Windows Autopilot and Apple Automated Device Enrollment.

• Define endpoint architecture, governance, standards, and operational processes.

• Develop strategies for macOS enrollment, provisioning, configuration, lifecycle management, security, patching, compliance, and inventory.

• Integrate Jamf with Microsoft Intune, Entra ID, Conditional Access, and Microsoft Defender for Endpoint.

• Oversee Windows migration and modernization efforts, including OS deployment, upgrades, device replacements, deployment rings, and pilot programs.

• Create automation solutions using PowerShell, shell scripting, .NET, SQL, REST APIs, and various other scripting technologies.

• Automate processes for provisioning, application deployment, security remediation, patching, and compliance.

• Architect Microsoft Defender for Endpoint solutions for Windows and macOS environments.

• Develop security baselines, vulnerability remediation strategies, endpoint detection and response measures, and Zero Trust controls.

• Integrate endpoints with Entra ID, Conditional Access, MFA, PIM, PAM, and identity governance technologies.

• Design CyberArk Endpoint Privilege Manager and Microsoft Endpoint Privilege Management solutions.

• Create KQL queries for Microsoft Defender XDR, Microsoft Sentinel, Log Analytics, and Advanced Hunting.

• Develop security and compliance dashboards utilizing PowerBI and SQL.

• Act as a senior technical escalation point and architectural authority for Endpoint Engineering.

• Mentor endpoint engineers and administrators.

• Conduct architecture reviews and make enterprise technology decisions.

• Foster collaboration among Endpoint Engineering, Cybersecurity, IAM, Infrastructure, and Application teams.

⛳️ Requirements

• Significant experience in architecting and managing large-scale enterprise endpoint environments across Windows and macOS.

• Profound expertise in Microsoft Intune, SCCM/MECM, Jamf Pro, Windows Autopilot, and Apple Automated Device Enrollment.

• Strong knowledge of Windows 10/11, macOS, iOS, and Android operating systems.

• Expertise in Microsoft Defender for Endpoint, Microsoft Entra ID, Conditional Access, and CyberArk EPM.

• Proficiency in PowerShell, shell scripting, and KQL.

• Understanding of endpoint security and Zero Trust architecture principles.

• Proven track record in leading enterprise endpoint transformation initiatives.

• Ability to connect Endpoint Engineering, Cybersecurity, and IAM while providing senior-level architecture and technical guidance.

🏝️ Benefits

• Fortive’s inclusive culture.

• Opportunities for learning and professional growth.

• Commitment to equal opportunity employment.

• Reasonable accommodations provided for applicants with disabilities.