EUC Architect

The End User Computing (EUC) Architect is a senior technical leadership role responsible for defining and executing enterprise endpoint, security, and identity architecture across Windows, macOS, and mobile device environments. The position leads the modernization of traditional endpoint management toward cloud-first Modern Management using Microsoft Intune, SCCM/MECM, Windows Autopilot, Jamf Pro, Microsoft Defender for Endpoint, Microsoft Entra ID, Microsoft 365, and CyberArk Endpoint Privilege Management.

Endpoint Architecture & Modernization Own and maintain the enterprise EUC and endpoint management roadmap across Windows and macOS. Architect Microsoft Intune, SCCM/MECM, and Jamf Pro environments. Lead SCCM-to-Intune modernization and co-management initiatives. Design modern provisioning strategies using Windows Autopilot and Apple Automated Device Enrollment. Establish enterprise endpoint architecture, governance, standards, and operational procedures. macOS & Jamf Management Architect and manage enterprise Jamf Pro capabilities. Design macOS enrollment, provisioning, configuration, and lifecycle management strategies. Manage configuration profiles, policies, application deployment, patching, compliance, and inventory. Implement FileVault encryption, macOS security controls, and configuration standards. Develop macOS upgrade and lifecycle strategies. Integrate Jamf with Microsoft Intune, Entra ID, Conditional Access, and Microsoft Defender for Endpoint. Cross-Platform Endpoint Management Establish consistent endpoint management standards across Windows and macOS. Develop enterprise strategies for provisioning, application deployment, patching, compliance, security, and device lifecycle management. Ensure Windows and macOS platforms meet enterprise security and compliance requirements. Windows Lifecycle Management Lead large-scale Windows migration and modernization projects. Design OS deployment, in-place upgrade, and device replacement strategies. Develop deployment rings, pilot programs, and risk mitigation plans. Create automated deployment and upgrade frameworks capable of supporting tens of thousands of endpoints. Engineering & Automation Develop automation using PowerShell, shell scripting, .NET, SQL, REST APIs, and other scripting technologies. Automate endpoint provisioning, application deployment, security remediation, patching, and compliance processes. Develop custom inventory, compliance, reporting, and endpoint management solutions. Integrate endpoint management platforms with identity and security technologies. Endpoint Security Architect Microsoft Defender for Endpoint across Windows and macOS. Develop security baselines, vulnerability remediation processes, and endpoint detection and response capabilities. Implement Attack Surface Reduction, endpoint compliance, disk encryption, and device security controls. Partner with Cybersecurity and SOC teams to improve endpoint detection, response, and threat monitoring. Support Zero Trust initiatives through device compliance, device health, Conditional Access, and identity-driven security controls. Identity & Privileged Access Integrate endpoints with Microsoft Entra ID, Conditional Access, MFA, PIM, PAM, and identity governance technologies. Architect CyberArk Endpoint Privilege Manager and Microsoft Endpoint Privilege Management solutions. Develop least-privilege strategies for Windows and macOS. Govern local administrator rights and application elevation. Partner with IAM teams to integrate endpoint management with enterprise identity and access management architecture. Security Analytics Develop KQL queries for Microsoft Defender XDR, Microsoft Sentinel, Log Analytics, and Advanced Hunting. Build security and compliance dashboards using PowerBI and SQL. Develop threat-hunting queries and correlate endpoint telemetry with identity, vulnerability, and configuration data. Automate security reporting and operational workflows. Technical