Endpoint Architecture Engineer

Job description

The Endpoint Architecture Engineer is responsible for defining, designing, and governing the global endpoint management architecture across Windows, macOS, iOS platforms. This role drives the strategic evolution of modern workplace technologies, ensuring secure, scalable, and user-centric endpoint services aligned with enterprise business objectives.

The Endpoint Architecture Engineer acts as the technical authority for endpoint management, identity integration, device security, lifecycle management, automation, and modern workplace transformations while partnering closely with Cybersecurity, Infrastructure, Service Management, and Digital Workplace teams

Key Responsibilities

Endpoint Architecture & Strategy

Define and maintain the global endpoint architecture roadmapDesign scalable Endpoint Management solutions using Microsoft Intune, Entra ID, Autopilot, Jamf Pro, and associated technologies.Lead the transition from legacy endpoint management solutions toward cloud-native architecturesEstablish endpoint standards, governance models, and design principlesEvaluate emerging technologies and provide strategic recommendationsModern Workplace Transformation

Design and implement Modern Device Management strategiesDevelop architectures supporting native Entra ID joined devicesLead large-scale endpoint migration initiativesDrive endpoint automation, self-service, and zero-touch provisioning capabilities.Support workplace modernization programs and digital employee experience initiativesSecurity & Compliance

Design endpoint security baselines and hardening standardsPartner with Cybersecurity teams to implement Zero Trust principlesDefine compliance policies, conditional access strategies, and device governance controlsEnsure alignment with regulatory, privacy, and corporate security requirementReview architectural impacts of endpoint-related security initiativesPlatform Ownership

Govern Microsoft Intune, SCCM, Jamf Pro, Apple Business Manager, and related management platformsDefine architectural patterns for: Device enrollment Software distribution Patch management Endpoint security Device lifecycle management Remote support Configuration managementEnsure platform scalability, resilience, and operational excellenceAutomation & Integration

Design integrations with: ServiceNow Microsoft Graph Microsoft 365 Identity Management platforms Security platformsDevelop automation standards utilizing PowerShell, Graph API, and modern cloud technologiesDrive reduction of operational overhead through automated workflowsTechnical Leadership

Serve as highest-level technical escalation point for endpoint architecture topicsMentor Endpoint Engineers and Platform AdministratorsLead architecture reviews and technical design sessionsProvide guidance to project teams and leadershipContribute to global technology governance boards

Required Qualifications

Bachelor's degree in Computer Science, Information Systems, or Engineering8+ years of experience in Endpoint Management, Workplace Engineering, or Infrastructure Architecture5+ years of experience with: Microsoft Intune Microsoft Entra ID Microsoft Autopilot Windows 11 Enterprise

Preferred Qualifications

Microsoft Certified: Endpoint Administrator Associate Enterprise Administrator Expert Cybersecurity Architect ExpertJAMF and ITIL certificationsExperience with: DEX platforms (Nexthink, Lakeside) Conditional Access Privileged Access Management Endpoint Detection & Response Azure Automation Microsoft Graph APIStrong experience with: Jamf Pro Apple Business Manager macOS enterprise managementAdvanced understanding of: Endpoint security Device compliance Identity and access management Zero Trust ArchitectureExperience designing enterprise-scale endpoint solutions for global organizations

Pay Range

The annual salary for this position is between $96,000.00 - $192,000.00 annually. Factors which may affect pay within this range include, but are not limited to, skills, education, experience, and other unique qualifications of the successful candidate. The pay range will not be below the minimum wage applicable to the jurisdiction in which the applicant is to be employed.

Other Compensation

This position is entitled to short-term cash incentives, subject to plan requirements.

Benefits

Employees are eligible for benefits, including:

Health Care Benefits: Medical, Dental, Vision; Wellness incentives

Retirement Benefits

Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation

Disability: Short-term and long-term disability

Life Insurance and Accidental Death and Dismemberment

Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account

Tuition Assistance

To learn more about our benefits offering, please click here Work with us | Carrier Corporate. The specific benefits available to any employee may vary depending on state and local laws and eligibility factors, such as date of hire and the applicability of collective bargaining agreements.

Carrier EEO Statement and Accommodations Process

Carrier is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status or any other applicable state or federal protected class. Carrier provides affirmative action in employment for qualified individuals with a Disability and Protected Veterans in compliance with section 503 of Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.

If you require a reasonable accommodation to complete the application process, participate in an interview, or otherwise engage in the hiring process, please contact us at Carrier.Recruiting@carrier.com. We will make every effort to meet your needs in accordance with applicable laws.

Application Deadline

Applications will be accepted for at least 3 days from Job Posting Date: 22 September 2026

Job Applicant's Privacy Notice

Please click on the link to review the Job Applicant Privacy Notice.

Use of AI

Technology-enabled tools may support parts of the recruitment process, with oversight by people.