End User Compute Architect

Elfonze Technologies Pvt. Ltd.; United States; Remote; USD 170,000 - 230,000; Full time

Job summary

Elfonze Technologies is seeking an experienced End User Compute Architect to design and govern Microsoft 365, Exchange Online, and cross-tenant architectures for complex carve-outs. You will define Intune policies, Autopilot profiles, and MFA-driven security controls across tenants, ensuring secure device mobility and policy alignment.

The role requires extensive experience with Defender/CrowdStrike, PKI, and Entra ID, with travel to client sites as needed and collaboration with UK/EU

Qualifications

• 10+ years of experience in end user compute architecture.
• Strong experience with Microsoft 365 and Exchange Online.
• Strong experience with Microsoft Intune policies and Windows Autopilot.
• Experience with device wipe, re-enrolment and tenant-to-tenant moves.
• Experience with cross-tenant sync and shared mailboxes.
• Experience with XDR/EDR solutions (e.g., Defender, CrowdStrike).
• Experience with patching tools and endpoint software management.
• Experience with ZTNA and VPN deployments (2 vendors).
• Good PKI knowledge and MFA design.
• Working knowledge of Entra ID and hybrid identity.
• Experience with Azure and AWS as cloud providers.
• Willing to travel and work in client time zones.
• Infrastructure background and IT consolidations/carve-outs experience.

Responsibilities

• Design the target Microsoft 365 and Exchange Online architecture.
• Design cross-tenant synchronisation and cross-tenant trust.
• Design mailbox, shared mailbox and user management approaches.
• Define Intune policies, Autopilot profiles and device wipe/re-enrolment designs.
• Design device moves between tenants with compliance baselines.
• Define XDR/EDR strategy and endpoint protection policies.
• Plan patching and software deployment for managed endpoints.
• Design ZTNA and VPN client deployment and management.
• Define PKI, certificate issuance and device certificates.
• Define preventive controls including MFA enforcement.
• Produce high-level and low-level designs and review with client architects.

Skills

End user compute

Microsoft 365

Intune policies

Windows Autopilot

MFA design

Entra ID

Hybrid identity

Tenant-to-tenant moves

Tools

Microsoft Defender

CrowdStrike

Exchange Online

Azure

AWS

Job description

Designs the end user compute and Microsoft 365 architecture for a carve-out, covering devices, mailboxes, endpoint security and certificates. Owns the target-state design and the technical approach for moving users and devices between tenants.

Job Responsibilities

• Design the target Microsoft 365 and Exchange Online architecture
• Design cross-tenant synchronisation and cross-tenant trust
• Design mailbox, shared mailbox and user management approaches
• Define Intune policies, Autopilot profiles and device wipe and re-enrolment designs
• Design device moves between tenants, including compliance and configuration baselines
• Define XDR and EDR solution architecture and endpoint protection policies
• Design patching and software deployment for managed endpoints
• Design ZTNA and VPN client deployment and management
• Design PKI, certificate authority delegation and device certificate issuance
• Define preventive controls including application locking and MFA enforcement
• Produce high-level and low-level designs and review them with client architects

Required Experience

• 10+ years of relevant experience in end user compute architecture
• Strong experience with Microsoft 365 and Exchange Online
• Strong experience with Microsoft Intune policies and Windows Autopilot
• Experience with device wipe, re-enrolment and tenant-to-tenant device moves
• Experience with cross-tenant sync, cross-tenant trust and shared mailboxes
• Experience with mailbox migration and user management
• Experience with XDR and EDR solutions, such as Microsoft Defender and CrowdStrike
• Experience with patching tools and endpoint software management
• Experience with ZTNA and VPN client deployment, at least two vendors
• Good understanding of PKI: certificate authorities, templates, delegation and device certificates
• Experience with preventive controls such as application locking
• Experience with MFA design and enforcement
• Working knowledge of Entra ID and hybrid identity as it affects endpoints
• Experience with at least two cloud providers (Azure and AWS)
• Exposure to at least two OEMs or two vendors in each technology area
• Strong communication skills, with prior experience working with UK and EU clients
• Willingness to travel as required and to work in the client time zone
• Prior infrastructure background alongside the specialism above
• Prior experience in IT consolidations, mergers, demergers and carve-outs (mandatory)
• Relevant professional certifications strongly recommended