Endpoint Architect

Novolex; Lake Forest (IL); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

401(k) plan with company match

Comprehensive medical, dental, and vision insurance

Paid vacation and holidays

Job summary

Novolex is seeking an Endpoint Technologies Architect to design and govern enterprise-scale EUC environments, focusing on Microsoft Azure Virtual Desktop and Windows 365. This role requires over 10 years of experience with Windows OS and 5 years with virtual desktops, ensuring secure user experiences and operational excellence.

The ideal candidate will have a strong PowerShell automation mindset, project management abilities, and excellent communication skills to collaborate across teams. Comprehensive benefits and a competitive salary of $130,000 - 150,000 await.

Qualifications

• 10+ years supporting Windows client operating systems in enterprise environments.
• 5+ years hands-on experience with virtual desktop platforms.
• Demonstrated experience architecting and operating SCCM/MECM and Microsoft Intune.

Responsibilities

• Architect, design, and optimize Azure AVD and Windows 365 environments.
• Define and maintain architecture standards for VDI deployment.
• Act as the top-tier escalation for complex endpoint incidents.

Skills

Windows client OS troubleshooting

PowerShell automation

Strong communication skills

Project management

Education

Bachelor’s degree in Computer Science

Tools

Microsoft Azure

SCCM/MECM

Microsoft Intune

Group Policy

Job description

Position Overview

The Endpoint Technologies Architect is responsible for designing, implementing, and governing enterprise-scale end‑user computing (EUC) environments across physical and virtual endpoints. Primary focus areas include Microsoft Azure Virtual Desktop (AVD) and Windows 365 (W365), with ownership of the full lifecycle for endpoint technologies, ensuring secure, compliant, and consistent user experiences. This role partners closely with security, identity, networking, application, and infrastructure teams and serves as the highest technical escalation for endpoint platforms and Windows 10/11.

Essential Duties and Responsibilities

• Architect, design, and optimize Azure AVD and Windows 365 environments for scalability, performance, resilience, and cost‑efficiency.
• Define and maintain architecture standards and best practices for VDI deployment, configuration, security hardening, and lifecycle management.
• Design and provision virtual machines (images, specs, profiles), configure networking/storage/backup, and implement user profiles and access controls.
• Develop and maintain standardized Windows images and configurations for laptops, desktops and tablets; ensure consistency across managed devices.
• Ensure adherence to organizational security standards and regulatory requirements (e.g., encryption, identity, data protection).
• Act as the top‑tier escalation for complex endpoint incidents across physical and virtual devices; perform root‑cause analysis and drive durable fixes.
• Monitor health and performance of EUC/VDI platforms; execute maintenance, updates, and patching to sustain reliability and security.
• Create and maintain comprehensive technical documentation, SOPs, and troubleshooting guides; enable knowledge transfer to support teams.

Endpoint Management Responsibilities (SCCM/Intune/Group Policy)

• Own Microsoft Configuration Manager (SCCM/MECM) platform health and governance: hierarchy design, CMG usage, distribution point strategy, boundary groups, collections, RBAC, and custom reporting.
• Engineer application packaging and deployment, software update management (ADRs), task sequencing/OSD, compliance baselines, and inventory/compliance reporting.
• Lead Modern Management with Microsoft Intune: device enrollment, configuration profiles, compliance policies, update rings/feature flighting, application lifecycle (Win32/MSIX), Autopilot, and co‑management scenarios.
• Design a scalable Group Policy framework: authoring, targeting, troubleshooting, change control, and rationalization/migration of legacy GPOs to MDM policies where appropriate.
• Integrate endpoint compliance, patching posture, and security operations across physical devices and AVD/W365 virtual desktops.

Skills and Competencies

• Expert troubleshooting of Windows client OS (Windows 10/11), registry, policy processing, user profiles, and application compatibility.
• PowerShell‑first mindset for automation (image/config automation at scale, compliance remediation, reporting, and API integration).
• Strong communication and documentation skills; ability to influence and collaborate across cross‑functional teams.
• Project and time management in fast‑paced operational environments.

Education and Experience (Qualifications)

• Bachelor’s degree in Computer Science or equivalent experience.
• 10+ years supporting Windows client operating systems in enterprise environments.
• 5+ years hands‑on experience with virtual desktop platforms.
• Demonstrated experience architecting and operating SCCM/MECM and Microsoft Intune at enterprise scale.
• Proven experience with Group Policy design, governance, troubleshooting, and MDM migration strategies.

Physical Requirements and Work Environment

• Ability to travel, as needed.
• Ability to safely and successfully perform essential job functions consistent with ADA, FMLA, and other applicable standards.
• Ability to maintain regular, punctual attendance consistent with ADA, FMLA, and other applicable standards.
• Must be able to lift and carry up to 50 lbs.

Compensation

Compensation: A reasonable estimate of the current range is $130,000 - 150,000 + bonus + benefits. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by job‑related skills, experience, and relevant education or training.

Benefits: The benefits for this role include 401(k) plan with company match, comprehensive medical, dental and vision insurance, flexible spending and health savings accounts, paid vacation, sick days, paid parental leave, paid holidays and a wellness program.

Equal Employment Opportunity

Novolex is committed to providing equal employment opportunity in all employment practices, including but not limited to selection, hiring, promotion, transfer, and compensation to all qualified applicants and employees without regard to age, race, color, national origin, sex, pregnancy, sexual orientation, gender identity, religion, handicap or disability, genetics, citizenship status, service member or veteran status, or any other category protected by federal, state, or local law. Any individual who, because of his or her disability, needs an accommodation in connection with an aspect of the Company’s application process should contact [e-mail].