[Remote] EUC Architect

Note: The job is a remote job and is open to candidates in USA. Advanced Sterilization Products is seeking an EUC Architect to provide senior technical leadership for enterprise endpoint, security, and identity architecture. The role will modernize Windows, macOS, and mobile device management through cloud-first technologies, lead endpoint security and identity integrations, and guide engineering standards, automation, and technical decisions.

Responsibilities

• Own and maintain the enterprise EUC and endpoint management roadmap across Windows and macOS
• Architect Microsoft Intune, SCCM/MECM, and Jamf Pro environments
• Lead SCCM-to-Intune modernization and co-management initiatives
• Design modern provisioning strategies using Windows Autopilot and Apple Automated Device Enrollment
• Establish enterprise endpoint architecture, governance, standards, and operational procedures
• Architect and manage enterprise Jamf Pro capabilities
• Design macOS enrollment, provisioning, configuration, and lifecycle management strategies
• Manage configuration profiles, policies, application deployment, patching, compliance, and inventory
• Implement FileVault encryption, macOS security controls, and configuration standards
• Develop macOS upgrade and lifecycle strategies
• Integrate Jamf with Microsoft Intune, Entra ID, Conditional Access, and Microsoft Defender for Endpoint
• Establish consistent endpoint management standards across Windows and macOS
• Develop enterprise strategies for provisioning, application deployment, patching, compliance, security, and device lifecycle management
• Ensure Windows and macOS platforms meet enterprise security and compliance requirements
• Lead large-scale Windows migration and modernization projects
• Design OS deployment, in-place upgrade, and device replacement strategies
• Develop deployment rings, pilot programs, and risk mitigation plans
• Create automated deployment and upgrade frameworks capable of supporting tens of thousands of endpoints
• Develop automation using PowerShell, shell scripting, .NET, SQL, REST APIs, and other scripting technologies
• Automate endpoint provisioning, application deployment, security remediation, patching, and compliance processes
• Develop custom inventory, compliance, reporting, and endpoint management solutions
• Integrate endpoint management platforms with identity and security technologies
• Architect Microsoft Defender for Endpoint across Windows and macOS
• Develop security baselines, vulnerability remediation processes, and endpoint detection and response capabilities
• Implement Attack Surface Reduction, endpoint compliance, disk encryption, and device security controls
• Partner with Cybersecurity and SOC teams to improve endpoint detection, response, and threat monitoring
• Support Zero Trust initiatives through device compliance, device health, Conditional Access, and identity-driven security controls
• Integrate endpoints with Microsoft Entra ID, Conditional Access, MFA, PIM, PAM, and identity governance technologies
• Architect CyberArk Endpoint Privilege Manager and Microsoft Endpoint Privilege Management solutions
• Develop least-privilege strategies for Windows and macOS
• Govern local administrator rights and application elevation
• Partner with IAM teams to integrate endpoint management with enterprise identity and access management architecture
• Develop KQL queries for Microsoft Defender XDR, Microsoft Sentinel, Log Analytics, and Advanced Hunting
• Build security and compliance dashboards using PowerBI and SQL
• Develop threat-hunting queries and correlate endpoint telemetry with identity, vulnerability, and configuration data
• Automate security reporting and operational workflows
• Serve as the senior technical escalation point for Endpoint Engineering
• Act as the architectural authority for Windows, macOS, Intune, SCCM, Jamf, endpoint security, and endpoint/identity integration
• Mentor endpoint engineers and administrators
• Lead architecture reviews and enterprise technology decisions
• Develop standards, documentation, reference architectures, and operational procedures
• Drive collaboration across Endpoint Engineering, Cybersecurity, IAM, Infrastructure, and Application teams

Skills

• The ideal candidate has extensive experience architecting and managing large-scale enterprise endpoint environments across Windows and macOS
• They should possess deep expertise in Microsoft Intune, SCCM/MECM, Jamf Pro, Windows Autopilot, Apple Automated Device Enrollment, Windows 10/11, macOS, iOS, Android, Microsoft Defender for Endpoint, Entra ID, Conditional Access, CyberArk EPM, PowerShell, shell scripting, KQL, endpoint security, and Zero Trust architecture
• The candidate should have demonstrated experience leading enterprise endpoint transformation initiatives and be capable of bridging Endpoint Engineering, Cybersecurity, and IAM while providing senior-level architecture and technical leadership

Benefits

• This position is also eligible for bonus as part of the total compensation package.

Company Overview

Company H1B Sponsorship