Senior Architect, Applications & Platforms584 (Bengaluru)

Brillio; Bengaluru; On-site; INR 2,800,000 - 4,000,000; Full time

Job summary

Brillio is seeking a Senior Tech Specialist for Digital Workplaces to drive modern endpoint management strategies across Windows 11, Intune, and Cloud PC solutions. You will design, deploy, and optimize Autopilot-based provisioning workflows and integrate with the Microsoft 365 security stack.

Key focus areas include Entra ID, conditional access, and cross-platform device management across Windows, macOS, iOS, and Android, with a strong emphasis on cloud-native approaches over legacy SCCM/MECM.

Qualifications

• Hands-on experience with Intune device management and Autopilot.
• Design and deploy Windows 365 Cloud PC or Azure Virtual Desktop.
• Expertise in Entra ID/Azure AD, conditional access, and endpoint security.

Responsibilities

• Assess business requirements and evaluate endpoint estate for modernization.
• Aid design and deploy Windows 365 Cloud PC environments with provisioning policies and networking.
• Implement Intune for cross-platform device management (Windows, macOS, iOS, Android).
• Lead the rollout of Windows Autopilot for zero-touch provisioning.
• Configure Entra ID join and hybrid join, plus conditional access policies.
• Develop and maintain Modern Endpoint standards and patch compliance.
• Provide SME-level authority on modern management strategies and cloud-native approaches.
• Produce documentation: HLDs, LLDs, runbooks, and knowledge transfer materials.
• Troubleshoot endpoint, Cloud PC, and Intune issues as escalation point.

Skills

Microsoft Intune

Windows 365 Cloud PC

Azure Active Directory / Entra ID

Windows Autopilot

SCCM / MECM (legacy to cloud)

Windows 11 deployment

PowerShell scripting

Microsoft Defender for Endpoint

Tools

Microsoft Graph API

PowerShell

Job description

Senior Tech Specialist, Digital Workplaces

Primary Skills

• Azure Platform Administration (PaaS), Azure Administration (IaaS)

Specialization

• Azure Infrastructure Engineering: Senior Tech Specialist, Digital Workplaces

Job requirements

ROLE OBJECTIVE & DELIVERABLES:

• Assessing business requirements and evaluating the existing endpoint estate, identifying opportunities to modernise and simplify device management.
• Aiding design and deploying Windows 365 Cloud PC environments, including provisioning policies, network configurations, and user assignment strategies.
• Implementing Microsoft Intune for modern device management, including device compliance policies, configuration profiles, and application deployment across Windows, macOS, iOS, and Android.
• Leading the design and rollout of Windows Autopilot for zero-touch device provisioning, reducing dependency on traditional imaging and on-premises infrastructure.
• Configuring and managing Microsoft Entra ID (Azure AD) join and hybrid join scenarios, conditional access policies, and identity-driven security postures.
• Developing and maintaining Modern Endpoint standards, including Windows 11 feature update rings, driver management, and ongoing patch compliance via Windows Update for Business.
• Integrating endpoint management with the broader Microsoft 365 ecosystem, including Defender for Endpoint, Purview compliance, and Microsoft 365 Apps deployment.
• Providing SME-level technical authority on modern management strategies, supporting the transition away from legacy tooling (e.g., SCCM/MECM, GPO-dependent configurations, on-premises VDI) towards cloud-native management.
• Producing technical documentation including high-level designs (HLDs), low-level designs (LLDs), operational runbooks, and knowledge transfer materials.
• Troubleshooting and resolving endpoint, Cloud PC, and Intune-related issues, acting as an escalation point within the delivery team.

KEY SKILLS &

• EXPERIENCE: Essential Robust hands-on experience with Microsoft Intune (device compliance, configuration profiles, app protection policies, Autopilot).
• Proven experience designing and deploying Windows 365 Cloud PC or Azure Virtual Desktop (AVD) solutions.
• Deep knowledge of Microsoft Entra ID (Azure AD), conditional access, and identity-driven endpoint security.
• Experience with Windows Autopilot provisioning (user-driven, pre-provisioned, and self-deploying modes).
• Solid understanding of Windows 11 deployment, servicing rings, and feature update management.
• Familiarity with Microsoft Defender for Endpoint onboarding and integration with Intune.
• Experience migrating organisations from legacy management tools (SCCM/MECM, Group Policy) to cloud-native Intune management.
• Desirable Microsoft certifications such as MD-102 (Endpoint Administrator), MS-102 (Microsoft 365 Administrator), or equivalent.
• Experience with Microsoft Graph API and PowerShell scripting for endpoint automation and reporting.
• Exposure to Universal Print, OneDrive Known Folder Move, and broader Microsoft 365 workload integration.
• Understanding of regulatory or compliance frameworks relevant to endpoint security (e.g., Cyber Essentials, ISO 27001).

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. .