Endpoint Solutions Architect

City of Welland; Welland; On-site; CAD 95,000 - 125,000; Full time

Job summary

City of Welland is seeking an Endpoint Solutions Architect to design, secure, and optimize the City’s endpoint computing environment. You will lead deployment of Intune, MECM/SCCM, and VDI, set security standards, and collaborate with cybersecurity teams to ensure compliant, reliable operations.

The role requires strong scripting, ITSM experience, and the ability to manage projects from planning through implementation in a municipal setting.

Qualifications

• Bachelor’s degree or higher in IT/CS or related field.
• Five years of municipal IT or equivalent enterprise experience with endpoint tech.

Responsibilities

• Administer and support endpoint tools (Intune, MECM/SCCM, Autopilot).
• Lead endpoint security, compliance, and encryption initiatives.
• Design, deploy, and maintain OS images, deployments, and patch management.
• Oversee lifecycle management for desktops, laptops, tablets, and mobile devices.
• Collaborate with cybersecurity and infrastructure teams on secure endpoint solutions.

Skills

PowerShell scripting

ITSM experience

Endpoint management

Collaboration

Communication

Problem solving

Education

University degree in IT/CS

Tools

Microsoft Intune

MECM/SCCM

Microsoft Autopilot

Microsoft Defender

Entra ID

Microsoft 365

VDI

FreshService

ServiceNow

BMC Helix

Jira Service Management

Job description

Reporting to the Chief Information Officer (CIO), the Endpoint Solutions Architect is responsible for the design, administration, support, security, and continuous improvement of the City’s endpoint computing environment. This position provides senior technical leadership for endpoint management technologies, including Microsoft Intune, MECM/SCCM, mobile device management platforms, endpoint security solutions, virtual desktop infrastructure, and Windows operating systems. The incumbent supports the planning and delivery of endpoint services and ensures endpoint technologies remain secure, reliable, compliant, and aligned with the City’s operational and cybersecurity objectives.

The duties listed are not meant to provide a description of each and every job performed but only those which represent the core functions of the job.

• Administer, maintain, and support endpoint and Client-related IT management tools including Microsoft Intune, MECM/SCCM, NinjaOne, Windows Autopilot, and related endpoint technologies.
• Administer and maintain the organization’s Service desk/IT Service Management Tool.
• Serve as the primary escalation resource for complex endpoint and client computing incidents.
• Design, deploy, and maintain operating system images, software deployments, application packaging, and patch management processes.
• Ensure endpoint devices remain secure, compliant, and operational.
• Maintain lifecycle management processes for desktops, laptops, tablets, and mobile devices.
• Monitor and support endpoint performance, availability, and compliance.
• Develop and maintain secure endpoint architecture standards, procedures, and best practices.
• Lead endpoint infrastructure projects from planning through implementation and operational transition, including the development of project plans, deployment strategies, schedules, and risk mitigation plans
• Lead endpoint hardening, compliance, encryption, and endpoint protection initiatives.
• Collaborate with cybersecurity and infrastructure teams to implement secure endpoint solutions.
• Evaluate and recommend emerging technologies, tools, and security enhancements.
• Develop and maintain technical documentation, standards, and operational procedures.
• Support compliance with corporate security policies, regulatory requirements, and cybersecurity frameworks.
• Participate in budget planning, technology lifecycle planning, and procurement activities, including vendor evaluations, Request for Proposal (RFP) development, technical specifications, and product assessments.
• Prepare technical recommendations, business cases, and implementation plans.
• Identify opportunities to improve efficiency, security, service delivery, and the end-user experience.
• Work with vendors, consultants, and service providers supporting endpoint technologies.
• Provide technical consultation and expertise to City departments regarding endpoint requirements and solutions.
• Develop reports, recommendations, and presentations for senior management regarding endpoint technologies and investments.
• Other duties as assigned.

Qualifications:

• University degree in Information Technology, Computer Science, Information Systems, or a related field.
• Five (5) years’ information systems experience within a municipal setting, as well as eight (8) years experience supporting and administering Microsoft endpoint technologies in an enterprise IT environment.
• Demonstrated experience with Microsoft Intune, MECM/SCCM, Microsoft Autopilot, Microsoft Defender, Microsoft Entra ID, Microsoft 365, and Windows endpoint administration.
• Experience designing, implementing, and supporting Virtual Desktop Infrastructure (VDI) environments.
• Strong experience with PowerShell scripting, automation, and process improvement.
• Strong Knowledge of IT Service Management (ITSM) and experience using and administering ITSM tools (FreshService, ServiceNow, BMC Helix, Jira Service Management)
• Experience planning and leading Client-facing IT projects in a medium sized, municipal organization.
• Microsoft 365 Endpoint administrator certification and ITIL certification are a definite asset.
• Thorough knowledge of endpoint security, device compliance, encryption, identity management, and cybersecurity best practices.
• Experience developing technical standards, procedures, documentation, and leading technology projects from planning through implementation.
• Strong analytical, problem-solving, interpersonal, verbal, and written communication skills, with the ability to work collaboratively with staff, vendors, and stakeholders