Seeking an experienced Endpoint Architect to design, implement, and optimize enterprise endpoint management solutions. This role involves leading the strategic direction of device management, security, automation, and endpoint lifecycle management across Windows, macOS, iOS, and Android environments. The ideal candidate will have deep expertise in Microsoft Endpoint Manager (Intune), SCCM, Azure AD, Zero Trust security, and automation frameworks.

Responsibilities: Endpoint Architecture & Strategy
Define and implement enterprise-wide endpoint management strategies aligned with business and security objectives.
Design and optimize Microsoft Endpoint Manager (Intune), SCCM, Windows Autopilot, and cloud-based endpoint solutions.
Establish Zero Trust security frameworks for endpoint protection and compliance.
Develop roadmaps, standards, and governance models for endpoint lifecycle management.

Endpoint Security & Compliance: Architect and enforce security policies, including Conditional Access, BitLocker, Defender for Endpoint, and Privileged Access Management.
Ensure compliance with NIST, CIS, ISO 27001, and other industry security standards.
Collaborate with InfoSec teams to enhance threat protection and risk mitigation strategies.

Automation & Optimization: Lead automation efforts using PowerShell, Graph API, Azure Automation, and Proactive Remediations.
Optimize device provisioning, patch management, and application deployment.
Implement self-healing and AI-driven endpoint management solutions.

Collaboration & Leadership: Partner with cross-functional teams (Security, Network, Cloud, Helpdesk) to ensure seamless endpoint operations.
Provide technical leadership, mentorship, and training to IT teams.
Evaluate and recommend emerging technologies in endpoint management and security.

Required Skills & Qualifications: 10 years of experience in endpoint architecture, device management, and security.
Expertise in Microsoft Endpoint Manager (Intune), SCCM, Azure AD, Windows Autopilot, and Modern Workplace solutions.
Deep knowledge of Windows, macOS, iOS, and Android endpoint security.
Strong understanding of Zero Trust, Conditional Access, and compliance frameworks.
Experience with automation (PowerShell, Graph API, Terraform, or Ansible).
Knowledge of Microsoft Defender for Endpoint, Sentinel, and SIEM/SOAR integrations.
Microsoft certifications (MD-102, MS-500, AZ-104, or equivalent) preferred.
Excellent communication, documentation, and leadership skills.