Microsoft 365 Intune Architect

Job description

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 24 sequential quarters of growth with $436.5M in Q4 FY26 revenue, up 17.4% Y-o-Y growth. Our 26,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We won the ++2025 ISG Star of Excellence™ Award for AI and Data Excellence++ and were named a ++Leader in the Everest Group Talent Readiness for Next-generation Data, Analytics and AI Services PEAK Matrix® Assessment 2025++.

**Role:** Microsoft 365 Intune Architect / SME

**Location:** Mexico

**Experience:**10+ years overall IT experience with 5+ years of Microsoft Intune Architecture experience

**Job Type:** FTE

**Mandatory 3 Skills:** Microsoft Intune \| Windows Autopilot \| Microsoft Entra ID

**About Position**

The Microsoft 365 Intune Architect is responsible for designing, governing, and implementing enterprise endpoint management solutions using Microsoft Intune, Microsoft Entra ID, Microsoft Defender, Conditional Access, and Microsoft 365 services. The role provides technical leadership, architecture governance, security best practices, migration strategy, and operational excellence for modern device management.

**What You'll Do**

* Design enterprise-scale Microsoft Intune architecture across Windows 10/11, macOS, iOS/iPadOS, Android Enterprise, and Windows 365 Cloud PCs.

* Define endpoint management strategy, governance frameworks, and technology roadmaps.

* Create High-Level Designs (HLDs), Low-Level Designs (LLDs), solution architectures, and implementation plans.

* Design hybrid and cloud-native endpoint management solutions.

* Design and implement Microsoft Entra ID integration, Conditional Access, MFA, and Zero Trust frameworks.

* Define compliance and security baselines aligned with CIS and NIST best practices.

* Design and govern Windows Autopilot, Apple Business Manager (ABM), ADE, and Android Enterprise deployment strategies.

* Establish enterprise application management standards including Win32 packaging and Microsoft 365 Apps deployment.

* Establish RBAC models, Scope Tags strategy, PIM, and privileged access models.

* Provide technical leadership, mentoring, governance, and operational support frameworks.

* Build PowerShell automation solutions and utilize Microsoft Graph API integrations.

* Lead large-scale enterprise migration, merger, separation, and MDM/MAM transformation initiatives.

**Expertise You'll Bring**

* 10+ years of overall IT experience with at least 5 years specializing in Microsoft Intune Architecture.

* Expert-level experience with Microsoft Intune Administration.

* Strong expertise in Microsoft Entra ID, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust architecture.

* Hands-on experience with Windows Autopilot design, deployment, troubleshooting, and lifecycle management.

* Experience managing Apple Business Manager (ABM), ADE, Android Enterprise, and multi-platform device management.

* Strong knowledge of Microsoft Graph API, PowerShell automation, PKI, SCEP, PKCS certificates, and Microsoft Sentinel integration.

* Experience managing compliance policies, security baselines, update rings, feature updates, and App Protection Policies.

* Ability to troubleshoot enrollment failures, ESP issues, policy conflicts, certificate issues, Conditional Access failures, and co-management challenges.

* Proven experience supporting large enterprise migrations, mergers \& acquisitions (M\&A), and device transformation programs.

* Microsoft certifications such as Endpoint Administrator Associate, Enterprise Administrator Expert, Cybersecurity Architect Expert, or Identity and Access Administrator Associate are preferred.

**Success Measures**

* Successfully delivers and governs enterprise-scale endpoint management architectures.

* Implements secure, compliant, and scalable Microsoft Intune and Entra ID environments aligned with Zero Trust principles.

* Drives successful migration, MDM/MAM transformation, merger, and separation initiatives for large enterprises.

* Ensures operational excellence through automation, governance, security controls, and compliance monitoring.

* Provides technical leadership and mentorship while maintaining high standards for endpoint security and administration.

**Benefits:**

* 30 days Christmas bonus (Aguinaldo)

* 13% Saving fund, capped to the law limit.

* 12% Grocery coupons, capped to the law limit.

* 12 vacation days first year + 6 floating days -- number of vacation days increase according to seniority.

* Annual performance evaluation with rewards and recognitions.

* Up to USD 200 pre-approved annually for certifications relevant to the employee's role.

* Free courses available at internal platforms.

* Major medical insurance (Spouse and children Included)

* Minor medical insurance (Spouse and children Included)

* Dental Insurance (Spouse and children Included)

* Visual Insurance (Spouse and children Included)

* Life insurance.

* Preferential price on car insurance (car fleet).

**Our company fosters a values-driven and people-centric work environment that enables our employees to:**

* Accelerate growth, both professionally and personally

* Impact the world in powerful, positive ways, using the latest technologies

* Enjoy collaborative innovation, with diversity and work-life wellbeing at the core

* Unlock global opportunities to work and learn with the industry's best

**Let's unleash your full potential at Persistent**

***"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."***