Digital Cloud Architect

Sonata Software North America Inc.; Redmond (WA); On-site; Full time

Job description

We are seeking a highly skilled and experienced Platforms Architect to join our team. The ideal candidate will have extensive knowledge and hands-on experience with Windows Server & Client along with SCCM & Intune. (Above 10 yrs experience with English and Arabic).

Windows Server.

Role
The Microsoft Platform Engineer (Client, servers and virtualization) Engineer role requires knowledge and experience in a number of the following technologies/areas:

• Experience with Deployment technologies like WDS, MDT, High Availability technologies like storage Backup Hyper-V.
• Expertise on Storage SAN NAS DAS understanding of storage stack its architecture.
• Virtualization (Hyper-V) : Monolithic and Microkernel ,Hyper-V ring Architecture.
• VHD and AVHDX Merging Checking integrity with its differencing chain.
• Failover , Planned Failover, Test Failure, Unplanned Failover.
• Hyper-V Migration.
• Windows as a service with its deployment rings concepts, co-management with MEMCM is an added advantage.
• Troubleshooting windows updates issues and understanding of Component based servicing.
• Understanding of Patch Management and experience with Windows Server Update Services (WSUS).
• Windows Server Operating System knowledge which includes understanding of NTFS/Share Permissions, File Sharing, Performance Monitoring, Event logging, Task Manager, Windows Firewall, User and Group Management.
• Understanding of WMI and familiarity with WMI queries
• Active Directory concepts such as Kerberos, LDAP, Sites and Security Groups.
• Understanding of TCP/IP and other networking services: DNS, WINS, DHCP, Routing.
• Exceptional Problem-Solving and Communication Skills - Spoken and written English (including technical writing).

Windows client
Role type Customer Engineer - CSA Skills Required Broad knowledge of Windows Server & Windows 10 and Windows 11 platforms, including deployment, management, and troubleshooting.

Expertise in Windows 365, providing seamless hybrid work environments by integrating with Azure Virtual Desktop.

Proficiency in Microsoft Intune for device management, including application deployment, security baselines, and dynamic provisioning.

Experience with Windows Hello for Business, Windows Sandbox Management, and Endpoint Analytics for Windows 11.

Ability to manage and configure Windows 365 Cloud PCs, ensuring consistent and uninterrupted work experiences.

Windows & Cloud Environments Windows 10/11 – Deployment, configuration, troubleshooting

Windows 365 Cloud PC

– Provisioning, optimization, licensing, and performance tuning Entra ID (Azure AD) Hybrid Join & Entra Join

– Configuration and troubleshooting Windows Update for Business (WUFB)

– Update compliance and management LAPS (Local Administrator Password Solution) & Windows LAPS

– Configuration, management, and differences KMS / MAK Licensing / Cloud-based licensing

– For W365 and traditional enterprise activation Virtual Desktop & Cloud Solutions Windows 365 vs. Azure Virtual Desktop (AVD)

– Use case comparison and best practices Networking & Bandwidth Tuning

– Optimizing Cloud PC performance Security & Compliance Microsoft Defender for Endpoint (MDE)

– Security policies, monitoring, and integrations Conditional Access & Device Compliance

– Enforcing security baselines (GPOs, Intune at a high level) BitLocker & Windows Hello for Business

– Encryption and authentication Security Standards & Baselines

– NIST 800-53, Zero Trust principles Application Management & Deployment Winget & MSIX Packaging

– Modern app deployment Microsoft Store for Business (MsFB) Private Store Deprecation

– Transition planning Identity & Authentication Entra AD (Azure AD) & Hybrid Join

– When and how to use them Single Sign-On (SSO) & Multi-Factor Authentication (MFA)

– Securing endpoints RBAC (Role-Based Access Control)

– Ensuring scoped access Networking & Connectivity VPN & Always-On VPN

– Secure remote access Cloud PC Networking

– Latency, bandwidth, and connectivity considerations Wi-Fi Authentication

– 802.1X, certificate-based authentication DNS, DHCP, Firewall Basics

– Endpoint connectivity essentials Monitoring & Troubleshooting Windows Event Logs Perf Logs & Defender Logs

– Digging into issues Performance Monitoring

– Task Manager, Resource Monitor, Sysinternals tools Remote Troubleshooting

– Quick Assist, Remote Desktop

Other Essential Skills

Problem-Solving Mindset

– Can diagnose and resolve complex issues

Scripting & Automation

– PowerShell for automation and remediation

Documentation & Knowledge Sharing

– Creating technical guides and best practices

Collaboration

– Working cross-functionally with security, networking, and IT teams

User-Centric Approach

– Balancing security and usability

Optional Skills

8+ years’ experience with customer facing roles in systems architecture, administration, operations, software support, IT consulting, on-premises and cloud support or consulting for enterprise and/or government customer base, and advanced troubleshooting

SCCM/Intune Customer Engineer
We are looking for a SCCM/Intune Customer Engineer to provide technical support for Microsoft Endpoint Configuration Manager (SCCM) and Microsoft Intune environments. This role focuses on assisting customers with request resolution, troubleshooting, and day-to-day operational support, helping ensure reliable endpoint management across on-premises and cloud-based devices.

Key Responsibilities

• Responsibilities include, but are not limited to, the following examples:
• Provide Tier 3 support to customers for technical requests related to SCCM and Intune environments.
• Proactively review customer concerns and provide recommendations to improve endpoint management, user experience, and policy compliance.
• Investigate and resolve requests related to:
• - SCCM: application deployment, task sequences, driver packages, software update groups (SUGs), boundaries and boundary groups, distribution point health, and client push installation.
• - Intune: device compliance policies, configuration profiles, app protection policies, Autopilot deployment profiles, and co-management setup.
• Support mobile device management (MDM) requests, including:
• - Enrollment and management of iOS, Android, and Windows 10/11 devices.
• - Mobile app deployment via Intune (store apps, LOB apps, and web links).
• - Addressing customer requests related to enrollment challenges, access configurations, and policy enforcement across mobile platforms.
• Assist customers with transitioning workloads from SCCM to Intune, including Windows Update for Business, endpoint security, and app deployment.
• Analyze logs and diagnostics (e.g., CMTrace, Event Viewer, Intune troubleshooting blade, MDMDiagnosticsTool) to identify root causes and resolve requests efficiently.
• Provide clear, professional technical guidance to customers and internal teams, adjusting communication style based on audience and context.
• Document support requests, investigation steps, resolutions, and known best practices.
• Collaborate with engineering or escalation teams when advanced troubleshooting or deeper investigation is required.

Soft Skills & Presentation skills

• Strong communication skills with the ability to translate complex technical topics into simple, customer-friendly language.
• Active listening and empathy when engaging with end users or customer teams.
• Adaptable and calm under pressure, especially when working with high-impact or time-sensitive support requests.
• Excellent time management, prioritization, and follow-through.
• Strong sense of ownership and accountability for customer experience and outcomes.
• Collaborative mindset with a willingness to work cross-functionally to drive resol

Good to have : Azure certifications (Azure Solutions Architect Expert; Azure Security Engineer Associate; Azure Administrator Associate)

Understanding of competitor clouds and how they compare to Microsoft solutions.

Technical experience with hybrid infrastructures, architecture designs, and technology management.

Proven track record in successfully planning, deploying, operating, and optimizing cloud environments.

Advanced Microsoft certifications are preferred.

About Sonata Software

Sonata Software, with over $1.2 Billion Revenue, is a leading AI-first Modernization Engineering company, powered by our unique Platformation TM framework. Our 6400+ AI Engineers are helping enterprises transform from systems to intelligent business platforms leveraging partner ecosystem to drive speed, efficiency and growth. Our bouquet of Modernization Engineering Services with AI -first approach cuts across Cloud, Data, AI, Dynamics, Test Automation, and Managed Services.

Sonata’s AI-led modernization is enabled by a powerful suite of proprietary tools and assets. At the core is the Harmoni.AI Enterprise Platform, which includes AgentBridge-a governance and observability framework; AgentBuilder-a development toolkit for fungible agents integrated into enterprise systems; and the Agent Marketplace-an internal ecosystem for modular, reusable agents.

Headquartered in Bengaluru, India, Sonata Software has a strong global presence, including key regions US, UK, India, Malaysia, Mexico, Australia, DACH (Germany/Switzerland) & Nordics (Finland). We are a trusted partner of Fortune 500 companies in Banking, Financial Services and Insurance; Healthcare and Lifesciences; Telecom, Media, and Technology; and Retail, Manufacturing and Distribution space.

Deep collaborations with partners like Microsoft, AWS, Salesforce, and Snowflake strengthen our ability to deliver cutting-edge AI solutions. Our 30+years of partnership with Microsoft, and being part of the elite Microsoft Inner Circle, places us among the top 1% of global Microsoft partners. Sonata is now among the first companies to earn the Microsoft Frontier Partner Badge Also, Sonata Software is proud to achieve AWS Premier Tier Status in the AWS Partner Network.