Lead Endpoint Engineering Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Take full ownership of the design and execution of Iovance’s Intune and Autopilot environment.

• Develop Autopilot provisioning workflows for laptops that are factory-sealed and fully configured.

• Create intricate Intune configuration profiles, establish security baselines, define role-specific profiles, and implement exception policies.

• Manage Windows Update for Business ring operations.

• Design and oversee the deployment of Win32 applications using dependencies, detection rules, supersedence, and thorough testing.

• Construct Proactive Remediations for network drives, configuration drift, and application health challenges.

• Establish performance baselines for laptops and develop remediation workflows utilizing Intune Proactive Remediations, Endpoint Analytics, and Windows performance counters.

• Implement endpoint compliance policies along with Conditional Access protocols in collaboration with IT Security.

• Produce architecture diagrams, runbooks, packaging standards, and troubleshooting documentation.

• Provide training and mentorship to deskside and help desk personnel on Intune operations and escalation procedures.

• Assess endpoint management tools, including OEM driver management solutions.

• Design, construct, and uphold SharePoint Online sites, libraries, and lists.

• Configure SharePoint permissions, access controls, governance, lifecycle, archival processes, and troubleshooting methods.

• Develop and sustain Power Automate flows for approvals, notifications, document routing, and data collection.

• Integrate Power Automate with SharePoint, Microsoft Forms, and other Microsoft 365 services.

• Monitor, troubleshoot, enhance, and document automated workflows.

• Create and manage Microsoft Forms for internal data collection, surveys, and intake processes.

• Perform additional duties as assigned.

⛳️ Requirements

• A minimum of 8 years in enterprise IT, with at least 4–5 years focused on Intune, Autopilot, Entra ID, Conditional Access, and Windows Update for Business.

• Proven experience in architecting and managing an Intune environment for over 1,000 devices.

• Proficient production-level PowerShell skills for unattended automation across numerous devices.

• Familiarity with Intune Proactive Remediations, device configuration scripts, and reporting mechanisms.

• Experience in packaging Win32 applications for Intune, including silent installations, detection rules, dependency chains, and supersedence.

• Strong grasp of Entra ID dynamic groups and the design of Conditional Access policies.

• Experience managing drivers across diverse hardware fleets utilizing OEM tools or Windows Update for Business driver management.

• Background in regulated industries such as pharmaceuticals, biotechnology, medical devices, or financial services.

• Collaborative experience across IT, security, quality, and business teams.

• Competence in documenting processes and writing runbooks.

• Ability to remain stationary for extended periods and navigate within an office or remote workspace while occasionally exerting up to 10 pounds of force.

• Visual acuity for data analysis, computer screens, and extensive reading tasks.

• Capable of repetitive wrist, hand, and/or finger motions.

• Strong communication skills and the ability to engage in analytical, conceptual, and problem-solving activities.

• Exceptional conceptual thinking, judgment, troubleshooting, analysis, discretion, stress management, prioritization, urgency, and deadline management skills.

• Microsoft Certified: Endpoint Administrator Associate (MD-102) or an equivalent certification is preferred.

• A bachelor’s degree in a related field is preferred.

• Commitment to upholding Iovance Biotherapeutics’ core values, policies, procedures, and business ethics.

🏝️ Benefits

• A competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday policies.

• Opportunities for professional development and continuous learning.

• A collaborative and inclusive work environment.