Hybrid Enterprise Desktop Architect - Windows & Endpoint Strategy

Bessemer Trust; Port Reading (NJ); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid work environment

401(k) with profit‑sharing

Tuition reimbursement

Medical, dental, and vision plans

Life insurance and disability coverage

Paid time off and parental leave

Job summary

Bessemer Trust is seeking an experienced Enterprise Desktop Architect to lead the endpoint computing architecture across desktops, laptops, and VDI. This senior, hands-on role requires strong architectural judgment and collaboration with Information Security to balance security with usability.

The position is based in Woodbridge, NJ with a hybrid schedule (three days in office, two remote). The candidate will drive standards, automation, and modern endpoint technologies to enhance performance

Qualifications

• 8+ years of experience in Desktop Engineering, Endpoint Engineering, Workplace Technology, Infrastructure Engineering, or related field.
• Demonstrated experience as a senior engineer, technical lead, or enterprise endpoint architect in a large organization.
• Ability to develop endpoint architecture and technology strategy and to challenge existing designs and practices.
• Advanced hands-on knowledge of Windows 11 Enterprise architecture, configuration, optimization, deployment and troubleshooting.
• Strong experience with Microsoft Intune and modern endpoint management.
• Strong knowledge of Entra ID, Active Directory, Group Policy, Conditional Access, and identity/device-management concepts.
• Experience with Tanium or comparable endpoint-management platforms (deployment, patching, automation, telemetry).
• Experience with DEX, endpoint analytics, performance monitoring, benchmarking, and defining metrics.
• Strong PowerShell scripting and automation skills.
• Experience with enterprise endpoint security technologies and their impact on performance and UX.
• Experience with virtual desktop technologies (Citrix VAD, VMware Horizon, Azure Virtual Desktop, FSLogix).

Responsibilities

• Define and maintain the firm’s enterprise endpoint architecture and technology roadmap across desktops, laptops, VDI, endpoint management, identity integration, and app delivery.
• Establish and continuously reassess the enterprise desktop standard rather than defaulting to existing technologies or practices.
• Design, build, and optimize Windows 11 and endpoint configurations for performance, stability, security, and user experience.
• Evaluate endpoint hardware, software, security technologies, management platforms via analyses, pilots, and benchmarks.
• Define standards for provisioning, configuration management, patching, compliance, endpoint lifecycle management, and automation.
• Drive adoption of automated packaging, deployment, patching, and lifecycle management with Tanium and other endpoint‑management tech.
• Translate business and technical requirements into scalable, supportable enterprise solutions.
• Partner with Information Security to evaluate endpoint security configurations and controls and balance risk.
• Implement and mature Digital Employee Experience (DEX) metrics, baselines, and SLAs for endpoints.
• Provide hands-on architectural leadership for complex endpoint incidents and drive root-cause and corrective actions.
• Develop automation and engineering solutions to improve consistency, reliability, and efficiency.
• Mentor engineers and provide technical leadership across teams including Identity, Networking, Infrastructure, and Desktop Support.

Skills

Windows 11

Intune

Entra ID

Active Directory

Group Policy

Conditional Access

PowerShell

Endpoint analytics

DEX

End user experience

Tools

Tanium

Citrix VAD

VMware Horizon

Azure Virtual Desktop

FSLogix

Intune

Job description

Bessemer Trust is seeking an experienced Enterprise Desktop Architect to lead the endpoint computing architecture across desktops, laptops, and VDI. This senior, hands-on role requires strong architectural judgment and collaboration with Information Security to balance security with usability.

The position is based in Woodbridge, NJ with a hybrid schedule (three days in office, two remote). The candidate will drive standards, automation, and modern endpoint technologies to enhance performance