Architect – Endpoint Management

Tential Solutions; United States; On-site; USD 170,000 - 250,000; Full time

Job summary

Tential Solutions seeks a Principal Architect to own the enterprise endpoint strategy, governing End User Computing and Mobility services across Windows, macOS, and mobile endpoints.

You will lead architecture, standards, and governance, driving modernization with Intune, Autopilot, and related technologies while coordinating with internal teams and service providers.

Qualifications

• Experience owning enterprise endpoint strategy and architecture.
• Proven ability to lead cross-functional teams and coordinate with service providers.
• Strong governance and technical escalation skills.

Responsibilities

• Develop and execute enterprise endpoint architecture strategy across Windows, macOS, and mobile.
• Own OS standards, upgrade planning, and endpoint baselines.
• Lead endpoint management with Intune and related tools.
• Design policy, packaging, imaging, and deployment processes.
• Drive cloud-based endpoint management adoption and security alignment.
• Provide technical direction without direct supervision.
• Partner with Cybersecurity for endpoint security controls.

Skills

Endpoint architecture

Leadership

Technical governance

PowerShell scripting

Intune / Modern Endpoint Management

Security collaboration

Vendor management

Policy and imaging

Tools

Microsoft Intune

Windows Autopilot

Apple Business Manager

Entra ID

NinjaOne

Addigy

Group Policy

Active Directory

Job description

The Principal Architect serves as the enterprise technology owner and principal architect for all endpoint computing and enterprise mobility services. This role is the senior technical authority for End User Computing, Endpoint Engineering, Modern Endpoint Management, and Enterprise Mobility Services and is responsible for defining and executing the enterprise endpoint strategy while maintaining ongoing operational ownership of the platforms, processes, standards, and technologies that support approximately 7,500 Windows, macOS, and mobile endpoints.

The Principal Architect provides architectural leadership and technical governance for Microsoft Intune, Windows Autopilot, Apple Business Manager, Entra ID device registration, NinjaOne, Addigy, operating system standards, Group Policy, endpoint configuration baselines, device provisioning, software distribution, patching, application packaging, hardware and peripheral standards, endpoint lifecycle management, and enterprise mobility. The role leads through technical influence and coordination with internal teams and service providers and serves as the final technical escalation point for complex endpoint engineering issues.

Endpoint Architecture and Strategy

• Develop and execute the enterprise endpoint architecture strategy, standards, governance, and technology roadmaps for Windows, macOS, and mobile platforms.
• Own Windows and macOS operating system standards, upgrade planning, feature adoption, and endpoint configuration baselines.
• Lead endpoint technology planning and execution for acquisitions, divestitures, office openings and consolidations, migrations, and large-scale device refreshes.

Modern Endpoint Management

• Serve as technical owner for Microsoft Intune and the overall Modern Endpoint Management strategy, including architecture, design, implementation, governance, optimization, and operational ownership.
• Own Windows Autopilot, Apple Business Manager, Entra ID device registration, NinjaOne, Addigy, and related endpoint management technologies.
• Design and maintain endpoint enrollment, zero-touch provisioning, imaging, software distribution, patching, and device management processes across supported platforms.
• Drive adoption of cloud-based endpoint management and automation while ensuring solutions remain secure, scalable, supportable, and aligned with enterprise requirements.

Endpoint Engineering and Configuration Management

• Design, test, implement, and govern end-user Group Policies in Active Directory and establish consistent enterprise endpoint configuration standards.
• Serve as the final technical escalation point for complex desktop engineering, application packaging, imaging, patching, Group Policy, software distribution, device enrollment, and endpoint management issues.
• Own application packaging and compatibility standards; coordinate testing and implementation activities performed by Desktop Support and service provider teams.
• Provide technical direction to internal teams and service providers without direct supervisory responsibility.

Enterprise Mobility Services

• Establish and maintain the enterprise mobility strategy, standards, governance model, and technology roadmap for corporate mobile phones and tablets.
• Serve as the primary technology and vendor owner for T‑Mobile, including service planning, escalations, technology evaluation, rate‑plan and device‑standard input, and roadmap alignment in partnership with Procurement.
• Define standards for mobile devices, operating systems, accessories, enrollment, eSIM, zero‑touch provisioning, refresh, replacement, recovery, and retirement.
• Partner with Cybersecurity and operational teams to align mobility services with security, compliance, risk, and business continuity requirements.

Security and Risk Partnership

• Coordinate with Cybersecurity to design and implement endpoint security controls through Group Policy, Intune, and operating system configurations.
• Own BitLocker administration and governance while partnering with Cybersecurity on vulnerability remediation and Zero Trust initiatives.
• Participate in major incidents and security incidents involving endpoints, providing technical leadership for investigation, containment, remediation, and recovery activities.
• Contribute technical expertise to endpoint observability, compliance reporting, audit support, and operational metrics without serving as the primary owner of those functions.

Hardware, Vendor, Asset Lifecycle, and Licensing

• Lead evaluation, testing, selection, standardization, and lifecycle planning for enterprise laptops, desktops, mobile devices, peripherals, docking stations, and related end‑user technologies.
• Serve as the primary technology owner for strategic endpoint hardware vendors, including Dell, Apple, and other providers; participate in vendor evaluations and contract negotiations in partnership with Procurement.
• Own the complete endpoint lifecycle, including deployment, refresh, recovery, secure disposition, and selection and oversight of asset recovery and eWaste vendors.
• Manage licensing and technology governance for endpoint software such as Adobe Acrobat, Snagit, and other end‑user applications.

Automation and Continuous Improvement

• Develop and maintain PowerShell and other scripting solutions for endpoint provisioning, administration, software deployment, patching, remediation, and operational automation.
• Advance automation and standardization to reduce manual effort and improve the reliability, scalability, and consistency of endpoint operations.
• Evaluate emerging endpoint and mobility technologies, lead pilots, and recommend solutions that improve security, supportability, productivity, and associate experience.

Supervision

• No direct supervisory responsibilities are required in this position.