Enterprise Architect - Microsoft Defender for Endpoint (MDE)

Teknita LLC; Downey (CA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

The candidate will design and deploy Intune at scale, implement Entra ID Conditional Access, and contribute to Zero Trust security and regulatory compliance. Strong communication and leadership are essential.

Qualifications

• Bachelor’s degree in IT, Engineering, or related field (additional experience may substitute).
• ITIL certification is required.

Responsibilities

• Apply enterprise architecture principles to support large, complex IT initiatives.
• Align business processes with technology solutions and long-term IT strategy.
• Lead the design and implementation of enterprise endpoint management solutions in a Windows GCC environment.
• Architect and manage Microsoft Intune deployments for Windows 10/11 at enterprise scale.
• Design and implement Conditional Access policies using Entra ID, including MFA and compliance-based access.
• Support Zero Trust security initiatives and endpoint compliance strategies.
• Ensure solutions align with regulatory and security frameworks such as CJIS, HIPAA, FedRAMP High, DISA STIGs, and CIS Benchmarks.
• Develop architecture documentation, governance standards, and operational playbooks.
• Provide technical leadership and guidance to engineering teams.
• Communicate technical concepts clearly to both technical staff and executive leadership.

Skills

Enterprise architecture

Microsoft Intune

Entra ID

Conditional Access

Zero Trust

PowerShell

Microsoft Graph

Communication

Education

Bachelor’s degree in IT/Engineering

ITIL certification

Tools

Autopilot

BitLocker

Job description

Job ID# 10TEK0001-011426 – Posted 01/14/2026 – Contract | Hybrid – Downey CA, 90242

We are looking for an experienced Enterprise Architect to support complex initiatives involving enterprise architecture, endpoint management, and secure Microsoft environments. This role focuses on aligning business objectives with technical solutions, with an emphasis on Microsoft Intune and GCC enterprise environments.

The successful candidate will provide architectural leadership, guide implementation teams, and ensure solutions are scalable, secure, and compliant with applicable standards.

Key Responsibilities

Apply enterprise architecture principles to support large, complex IT initiatives

Align business processes with technology solutions and long-term IT strategy

Lead the design and implementation of enterprise endpoint management solutions in a Windows-based GCC environment

Architect and manage Microsoft Intune deployments for Windows 10/11 at enterprise scale

Design and implement Conditional Access policies using Entra ID, including MFA and compliance-based access

Support Zero Trust security initiatives and endpoint compliance strategies

Ensure solutions align with regulatory and security frameworks such as CJIS, HIPAA, FedRAMP High, DISA STIGs, and CIS Benchmarks

Develop architecture documentation, governance standards, and operational playbooks

Provide technical leadership and guidance to engineering teams

Communicate technical concepts clearly to both technical staff and executive leadership

Required Skills:

Strong knowledge of enterprise architecture methods and frameworks

Experience supporting business analysis, solution selection, and system integration

Advanced expertise with Microsoft Intune and Microsoft 365

Strong working knowledge of Entra ID, Conditional Access, and identity security

Experience with Autopilot, application packaging, BitLocker, and certificate-based authentication

Ability to automate administrative tasks using PowerShell and Microsoft Graph

Strong written and verbal communication skills

Experience Requirements"

Minimum of 5 years applying enterprise architecture principles

At least 3 years in a lead or senior architecture role

5+ years managing enterprise endpoint environments

3+ years designing and implementing Microsoft Intune solutions

Experience integrating Intune with Microsoft 365 services, including Defender for Endpoint and Purview

Experience working in large-scale enterprise or GCC environments

Background in Zero Trust security and compliance-driven architecture

Education:

Bachelor’s degree in IT, Engineering, or a related field
(Additional experience may substitute for formal education)

Required Certification: ITIL certification

Preferred Certifications

SC-300 (Identity and Access Administrator)