Lead Endpoint Architect & Zero-Trust Strategy

Sword Group; Aberdeen City; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Career development

Flexible working

Comprehensive benefits package

Job summary

Sword is seeking a senior architect/engineer to lead modern endpoint architecture across Windows, iOS and Android, with strong Intune and Zero Trust focus. You will shape target-state designs, drive implementation roadmaps and provide technical leadership across discovery, design, and deployment in complex enterprise environments.

Experience in Windows Autopilot, Intune, Defender for Endpoint and cloud identity (Entra/Azure AD) is essential; security-conscious, regulated environments and strong

Qualifications

• Deep hands-on expertise in modern endpoint architecture using Microsoft Intune across Windows 10/11, iOS/iPadOS and Android
• Designing and implementing Windows Autopilot and modern provisioning strategies
• Architecting Windows servicing and device lifecycle strategies using Windows Update for Business
• Strong experience with application packaging, testing and deployment including Win32 apps and Microsoft 365 Apps
• Strong understanding of Microsoft Entra ID, Conditional Access, MFA and zero trust alignment
• Hands-on experience with endpoint security controls using baselines, Settings Catalog, BitLocker and Defender for Endpoint
• MDM/MAM design with Intune including BYOD and device governance
• Knowledge of Active Directory, hybrid identity and cloud sync, RBAC and mapping across Microsoft 365
• Translate business, security, and operational requirements into architecture standards and designs
• Experience using PowerShell and Microsoft Graph for automation and reporting

Responsibilities

• Assess target-state architectures, migration approaches and implementation roadmaps
• Produce high-quality design documentation including assessments and implementation plans
• Provide technical leadership across discovery, design, implementation, testing and transition to support
• Design secure, scalable and compliant solutions aligned to Zero Trust
• Work with clients and internal teams to shape requirements and guide decisions
• Support endpoint security design across compliance, device configuration and identity integration
• Contribute to pre-sales activities and delivery estimates
• Act as a trusted advisor and senior technical authority in endpoint engagements
• Support practice development through reusable standards and architecture patterns

Skills

Endpoint architecture

Intune

Zero Trust

Security design

MDM/MAM

PowerShell

Azure AD

Windows Autopilot

Cross-functional

Documentation

Tools

Microsoft Intune

Microsoft Defender for Endpoint

Azure Active Directory

Windows Autopilot

Job description

Sword is seeking a senior architect/engineer to lead modern endpoint architecture across Windows, iOS and Android, with strong Intune and Zero Trust focus. You will shape target-state designs, drive implementation roadmaps and provide technical leadership across discovery, design, and deployment in complex enterprise environments.

Experience in Windows Autopilot, Intune, Defender for Endpoint and cloud identity (Entra/Azure AD) is essential; security-conscious, regulated environments and strong