Cloud-Native Endpoint Architect (Zero Trust)

asmexternalcareersite; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

ASM Research seeks an experienced Endpoint Architecture and Strategy professional in Washington, DC. You will own the target-state architecture for endpoint provisioning, security, and support tooling, and manage a multi-year modernization roadmap aligned to Zero Trust.

You will drive transition from ConfigMgr to Intune, move to Entra ID, and oversee Windows Autopilot and Autopatch adoption, while ensuring compliant security baselines and effective automation.

Qualifications

• Bachelor's degree in IT, CS, or 12+ years of related experience in lieu of a degree.
• 8+ years of enterprise Windows endpoint management experience, including 2+ years leading design initiatives.
• Ability to obtain and maintain a Public Trust; on-site in Washington, DC, 2 days/week.

Responsibilities

• Define and maintain endpoint target-state architecture covering identity, provisioning, config, delivery, update management, security, and support tooling.
• Own multi-year modernization roadmap with phases, criteria, and risk assessment.
• Design architecture artifacts and ADRs; review designs and enforce standards.
• Lead transition from ConfigMgr to Intune and move workloads to Intune co-management.
• Define device security configurations to meet NIST/Security baselines and Zero Trust requirements.
• Build automation and reporting using PowerShell, Graph API, and dashboards for leadership.

Skills

Windows endpoint management

Microsoft Intune

Co-management

PowerShell

Azure DevOps

ServiceNow

Technical leadership

Education

Bachelor's degree in IT/CS or 12+ years experience

Tools

ConfigMgr (SCCM)

Microsoft Intune

Entra ID

Windows Autopilot

Windows Update for Business

Windows Autopatch

BeyondTrust

Dell Command | Update

ServiceNow

Azure DevOps Boards

PowerShell

Job description

ASM Research seeks an experienced Endpoint Architecture and Strategy professional in Washington, DC. You will own the target-state architecture for endpoint provisioning, security, and support tooling, and manage a multi-year modernization roadmap aligned to Zero Trust.

You will drive transition from ConfigMgr to Intune, move to Entra ID, and oversee Windows Autopilot and Autopatch adoption, while ensuring compliant security baselines and effective automation.