End User Compute Architect

Elfonze Technologies; India; Remote; INR 4,500,000 - 7,000,000; Full time

Job summary

Elfonze Technologies is seeking an expert End User Compute Architect to lead the design of Microsoft 365 and Exchange Online architectures for complex carve-outs. You will drive cross-tenant synchronization, mailbox and user management strategies, and sophisticated device lifecycle designs across tenants.

The role requires deep experience with Intune, Autopilot, PKI, MFA controls, and hybrid identity with Entra ID, plus hands-on exposure to Azure and AWS.

Qualifications

• 10+ years in end user compute architecture.
• Strong MS 365 and Exchange Online experience.
• Experience with Intune policies and Windows Autopilot.
• Cross-tenant design and mailbox migration experience.
• Experience with XDR/EDR (Microsoft Defender, CrowdStrike).
• Knowledge of PKI and device cert issuance.
• MFA design and enforcement experience.
• Hybrid identity concepts with Entra ID.
• Experience with Azure and AWS.
• Exposure to UK/EU clients.
• Carve-out/IT consolidation experience.

Responsibilities

• Design target Microsoft 365 and Exchange Online architecture.
• Design cross-tenant synchronisation and cross-tenant trust.
• Design mailbox, shared mailbox and user management approaches.
• Define Intune policies, Autopilot profiles and device wipe and re-enrolment designs.
• Design device moves between tenants, including compliance and configuration baselines.
• Define XDR and EDR solution architecture and endpoint protection policies.
• Design patching and software deployment for managed endpoints.
• Design ZTNA and VPN client deployment and management.
• Design PKI, certificate authority delegation and device certificate issuance.
• Define preventive controls including application locking and MFA enforcement.
• Produce high-level and low-level designs and review them with client architects.

Skills

Microsoft 365 architecture

Exchange Online

Intune & Autopilot

Cross-tenant design

XDR/EDR security

PKI and device certs

MFA design & enforcement

Entra ID / hybrid identity

Azure & AWS cloud

Carve-out / IT consolidation

UK/EU client communication

Education

Professional certifications recommended

Tools

Microsoft Defender

CrowdStrike

Exchange Admin Center

Intune Console

Azure Portal

AWS Console

Job description

Designs the end user compute and Microsoft 365 architecture for a carve-out, covering devices, mailboxes, endpoint security and certificates. Owns the target-state design and the technical approach for moving users and devices between tenants.

Job Responsibilities

• Design the target Microsoft 365 and Exchange Online architecture
• Design cross-tenant synchronisation and cross-tenant trust
• Design mailbox, shared mailbox and user management approaches
• Define Intune policies, Autopilot profiles and device wipe and re-enrolment designs
• Design device moves between tenants, including compliance and configuration baselines
• Define XDR and EDR solution architecture and endpoint protection policies
• Design patching and software deployment for managed endpoints
• Design ZTNA and VPN client deployment and management
• Design PKI, certificate authority delegation and device certificate issuance
• Define preventive controls including application locking and MFA enforcement
• Produce high-level and low-level designs and review them with client architects

Required Experience

• 10+ years of relevant experience in end user compute architecture
• Strong experience with Microsoft 365 and Exchange Online
• Strong experience with Microsoft Intune policies and Windows Autopilot
• Experience with device wipe, re-enrolment and tenant-to-tenant device moves
• Experience with cross-tenant sync, cross-tenant trust and shared mailboxes
• Experience with mailbox migration and user management
• Experience with XDR and EDR solutions, such as Microsoft Defender and CrowdStrike
• Experience with patching tools and endpoint software management
• Experience with ZTNA and VPN client deployment, at least two vendors
• Good understanding of PKI: certificate authorities, templates, delegation and device certificates
• Experience with preventive controls such as application locking
• Experience with MFA design and enforcement
• Working knowledge of Entra ID and hybrid identity as it affects endpoints
• Experience with at least two cloud providers (Azure and AWS)
• Exposure to at least two OEMs or two vendors in each technology area
• Strong communication skills, with prior experience working with UK and EU clients
• Willingness to travel as required and to work in the client time zone
• Prior infrastructure background alongside the specialism above
• Prior experience in IT consolidations, mergers, demergers and carve-outs (mandatory)
• Relevant professional certifications strongly recommended