Infrastructure Systems Architect

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Define the target-state architecture, standards, design patterns, and roadmap for platforms related to endpoint management, telemetry, inventory, patching, and remote support.

• Establish governance for architecture, design review processes, architecture decision records, non-functional requirements, and exception handling.

• Evaluate endpoint management, RMM, and observability platforms, leading proof-of-concept initiatives and build-vs-buy analyses.

• Design scalable, resilient, multi-tenant, and multi-brand fleet management systems.

• Ensure alignment of fleet architecture with Zero Trust principles, conditional access, device compliance, and least-privilege strategies.

• Produce architecture diagrams, data flows, integration contracts, runbooks, and roadmaps.

• Develop tooling, APIs, connectors, and automation frameworks that integrate endpoint platforms with ITSM, CMDB, identity, asset, and location systems.

• Write production-quality code for agents, microservices, orchestration jobs, and internal tools.

• Build telemetry and observability solutions for real-time fleet health, compliance, and inventory reporting.

• Create self-healing and remediation automation processes.

• Implement CI/CD practices, infrastructure-as-code, testing, and release management methodologies.

• Prototype and refine capabilities before transitioning to Endpoint Engineering and Operations.

• Lead safe fleet-wide application deployments and provide architectural oversight for device deployment, refresh, migration, and integration programs for acquisitions.

• Design workflows for zero-touch provisioning, imaging, and enrollment.

• Define integration playbooks for acquired practices and newly established locations.

• Extend standards for fleet management, monitoring, and patching to clinical workstations and connected devices.

• Develop management strategies for constrained or vendor-controlled clinical endpoints.

• Ensure that designs comply with HIPAA safeguards and protected health information handling requirements.

• Act as the final escalation point for complex cross-domain technical challenges.

• Mentor engineers in system design, software engineering, automation, and documentation best practices.

• Participate in cross-functional design and readiness reviews.

• Translate technical direction into actionable recommendations and trade-offs for leadership.

• Provide architectural guidance to Endpoint Engineering, Implementation, and Field Support teams.

⛳️ Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related discipline (or equivalent work experience).

• Over 10 years of experience in systems architecture, platform engineering, or software engineering roles.

• Extensive experience in designing and operating device fleet management and monitoring systems at an enterprise scale across a distributed, multi-site environment.

• Proficient in endpoint agent architecture and lifecycle management.

• Production coding experience in .NET/C#, Go, Python, or JavaScript/TypeScript.

• Experience in designing and delivering distributed, service-oriented systems, including REST/gRPC APIs, message queues, event-driven patterns, relational and time-series data stores, caching, and secure secrets management.

• Familiarity with Microsoft Intune, Autopilot, MECM/SCCM, and JAMF.

• Experience in monitoring and observability, including metrics, logging, alerting design, and managing alert fatigue.

• Cloud platform expertise; Azure and GCP preferred, with AWS being acceptable.

• Experience with containerization and infrastructure-as-code tools such as Terraform.

• Knowledge in EDR, disk encryption, patch and vulnerability management, hardening baselines, and compliance reporting.

• Understanding of Windows and macOS internals, mobile and appliance device management, and PowerShell scripting.

• Networking knowledge encompassing DNS, DHCP, TCP/IP, VPN, SD-WAN, proxy/firewall traversal, and behavior in bandwidth-constrained sites.

• Competence in data modeling and reporting for asset, inventory, and compliance data.

• Bachelor's degree or equivalent work experience.

• Willingness to work occasional after-hours or weekends for major deployments, migrations, and critical escalations.

• Occasional travel of less than 10% is required.

🏝️ Benefits

• Paid time off.

• Health insurance.

• Dental insurance.

• Vision insurance.

• 401(k) savings plan with matching contributions.