Endpoint Management Architect – SCCM / Intune
Auxis
**Job Summary** The End-Point Lead/Architect owns the strategy, architecture, and team leadership for endpoint management across the Mosaic Infrastructure Managed Services engagement, supporting roughly 11,000 endpoints across the United States, Canada,...
Job description
**Responsibilities**
* Own the end-to-end architecture and roadmap for endpoint management across SCCM (Configuration Manager/MECM) and Microsoft Intune, including the co-management strategy between the two platforms.
* Lead the Endpoint Engineer Sr./Jr. team, assigning work, setting technical direction, and reviewing complex endpoint engineering deliverables.
* Design and govern device configuration profiles, compliance policies, and security baselines in Intune, aligned to client security requirements.
* Drive the migration of managed endpoints from traditional SCCM-based management to modern, cloud-first Intune management, including Windows Autopilot deployment strategy.
* Own OS deployment (OSD), imaging, application packaging, and patch management standards across the managed endpoint estate.
* Serve as the primary escalation point and subject matter expert for complex endpoint issues that exceed Tier 2/3 support.
* Partner with the Security and NOC teams to ensure endpoint compliance policies, patching cadence, and vulnerability remediation are met.
* Coordinate mobile device management (MDM) and mobile application management (MAM) policy design, in line with the client's defined mobile device scope and exclusions.
* Maintain accurate documentation of the endpoint architecture, standards, and configuration baselines.
* Support hardware refresh and large-scale endpoint transition/migration programs, including planning and execution oversight.
* Mentor and develop Endpoint Engineer Sr./Jr. staff on SCCM/Intune administration and modern endpoint management practices.
* Report on endpoint compliance, deployment health, and project status to the Infrastructure Manager and client stakeholders.
**Skills And Experience** **What You'll Bring**
* 5 years of experience in Endpoint Management, End-User Computing, or Endpoint Engineering, including 2 years in a Lead or Architect role.
* Strong hands-on experience with Microsoft SCCM / Configuration Manager (MECM), including OS deployment, application packaging, software distribution, and patch management.
* Strong expertise in Microsoft Intune, including configuration profiles, compliance policies, security baselines, and Windows Autopilot.
* Experience with SCCM and Intune co-management, including strategies to modernize and transition endpoint environments.
* Working knowledge of Microsoft Entra ID (Azure AD), including hybrid join and Conditional Access concepts.
* Experience designing and implementing enterprise endpoint solutions and contributing to technology strategy and roadmaps.
* Experience leading, mentoring, or providing technical direction to engineering teams.
* Strong verbal and written communication skills in English, with the ability to work effectively with technical and business stakeholders.
**Nice to Have**
* Microsoft certification in Endpoint Management, such as Microsoft 365 Certified: Endpoint Administrator Associate.
* Experience supporting large, multi-country enterprise environments.
* Experience with macOS, iOS, or Android device management.
* Experience working in a managed services or outsourced IT environment.
* Bilingual English/Spanish or English/Portuguese.
* ITIL Foundation certification.
* Experience with PowerShell and endpoint automation.
**Technical Skills \& Tools**
* Microsoft SCCM / Configuration Manager (MECM)
* Microsoft Intune
* Windows Autopilot and OS Deployment (OSD)
* Application Packaging and Software Deployment
* Microsoft Entra ID, Conditional Access, and Hybrid Join
* Endpoint Security Baselines and Compliance Policies
* Windows Patch Management, WSUS, and Intune Update Rings
* PowerShell and Endpoint Automation
* ServiceNow or equivalent ITSM platforms