Director, Enterprise Platform Engineering (Mac & Windows Endpoints)

The Vanguard Group; Wayne (PA); Hybrid; USD 210,000 - 260,000; Full time

Job summary

Vanguard in Wayne, PA seeks a seasoned leader to direct the Enterprise Platform Engineering for Windows endpoints. You will own strategy, architecture, and execution across hardware, Azure Virtual Desktop, and the management stack for tens of thousands of devices.

You will drive modernization, security, and operational excellence while partnering with security, risk, and business stakeholders to deliver measurable outcomes.

Qualifications

• 10+ years of progressive experience leading large-scale endpoint engineering or infrastructure teams.
• 5+ years leading leaders in engineering management.
• Deep expertise in Windows 10/11 enterprise scale engineering and deployment.
• Experience with Intune/Endpoint Manager, Autopilot, and device provisioning.
• Automation and scripting expertise (PowerShell, Graph API, CI/CD).
• Experience with Azure Virtual Desktop or enterprise VDI environments.

Responsibilities

• Define and execute the multi-year strategy for the Windows endpoint ecosystem, including HW, AVD, Intune, and security.
• Lead engineering teams responsible for Windows platform engineering and device lifecycle management.
• Oversee governance, policy design, and zero-touch provisioning across environments.
• Deliver platform as a product with roadmaps, KPIs, SLIs/SLOs, and UX improvements.
• Ensure global performance, reliability, and incident management at scale.
• Mentor and develop a high-performing engineering organization and foster ownership.

Skills

Windows Enterprise

Intune/Endpoint Manager

Autopilot

Azure Virtual Desktop

GPO Modernization

Endpoint Security

Automation

Leadership at Scale

Strategic Planning

Stakeholder Management

Tools

PowerShell

Graph API

CI/CD pipelines

Job description

Director, Enterprise Platform Engineering (Mac & Windows Endpoints)

This position serves as the senior leader accountable for the strategy, engineering, and operational excellence of our global Windows Endpoint ecosystem—physical devices (Windows 10/11), hardware, peripherals, virtual desktops (Azure Virtual Desktop), and the supporting management platforms (Intune, Autopilot, GPO modernization, endpoint security, and automation). This leader will oversee a large engineering organization responsible for the full lifecycle of endpoint delivery for tens of thousands of devices. They will drive modernization, enterprise‑scale efficiency, secure‑by‑default standards, and a best‑in‑class user experience. This role requires an exceptional blend of engineering breadth, strategy, transformational leadership, and operational rigor.

Core Responsibilities

Strategic Leadership & Vision

Define and execute the multi‑year strategy for the Windows endpoint physical and virtual ecosystem - HW, AVD, Intune, application delivery, automation, updates, and security posture.

Serve as the enterprise authority on Windows client engineering, hardware, modern endpoint management, virtualization strategy, and platform modernization.

Establish technology roadmaps for Windows 11, cloud‑managed device models, virtualization, and future workplace experience capabilities.

Partner with senior engineering, security, compliance, risk, support, network, collaboration, procurement, and business stakeholders.

Engineering Ownership & Platform Excellence

Lead engineering teams responsible for: Windows 10/11 platform engineering Azure Virtual Desktop architecture & operations Intune / AutoPilot / Endpoint Manager governance & policy design Application packaging/delivery & automation Firmware/BIOS, hardware standards, driver lifecycle, and performance optimization.

Oversee zero‑touch provisioning, configuration baselines, CIS/SOX/PCI compliance enforcement, endpoint telemetry, and health & reliability engineering.

Mature the platform‑as‑a‑product operating model—including roadmap, release management, KPIs, SLIs/SLOs, and user‑experience score improvements.

Operational Excellence

Ensure consistent global performance across tens of thousands of endpoints, meeting aggressive availability, reliability, and MTTR targets.

Strengthen the L2/L3 engineering/operations partnership and reduce engineering RUN burden to <20%.

Reduce incident volume through standardization, automation, and elimination of manual and legacy workflows.

Maintain accountability for patching, quality updates, security posture, and platform hardening.

Organizational Leadership & People Management

Lead, mentor, and develop a high‑performing multi‑discipline engineering organization (Managers, Architects, Senior Engineers, Platform Engineers).

Build an engineering culture focused on clarity of ownership, accountability, continuous improvement, and predictable delivery.

Create an environment that attracts top talent and maintains high engagement, while elevating engineering excellence and operational discipline.

Enterprise Partnership & Governance

Ensure alignment with enterprise architecture, cyber security, risk & compliance, infrastructure, and cloud platform strategies.

Oversee architecture reviews (ARB/MCC/SARB), change governance, and approval workflows for new technologies or platform changes.

Provide executive‑level communication for incidents, risks, regulatory concerns, platform change impacts, and roadmap initiatives.

Qualifications

10+ years of progressive experience leading large‑scale endpoint engineering or infrastructure teams; 5+ years leading leaders.

Deep expertise in: Windows 10/11 platform engineering at enterprise scale Microsoft Intune/Endpoint Manager, Desktop, Laptop, and peripheral hardware, Autopilot, GPO modernization Azure Virtual Desktop or enterprise VDI environments Endpoint security frameworks, CIS baselines, Zero Trust principles Automation (PowerShell, Graph API, CI/CD pipelines).

Demonstrated success operating a large‑scale fleet (>20k devices) with globally distributed teams.

Strong command of enterprise operations, major incident management, and engineering KPI/OKR constructs.

Proven ability to influence senior stakeholders, lead through ambiguity, and deliver measurable business outcomes.

Preferred skills

Experience in regulated industries (financial services, insurance, healthcare).

Modern Workplace & Microsoft certifications (MDM/Intune, Windows, Azure).

Experience with Mac, mobile, or cross‑platform endpoint architecture.

Familiarity with SCCM/ConfigMgr coexistence and cloud transition strategies.

Special Factors

Sponsorship Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission. To work for the long‑term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

Vanguard, one of the world’s leading investment management companies, serves individual investors, institutions, employer‑sponsored retirement plans, and financial professionals.

We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in‑person learning, collaboration, and connection.

We believe our mission‑driven and highly collaborative culture is a critical enabler to support long‑term client outcomes and enrich the employee experience.