The Endpoint Architecture Engineer is responsible for defining, designing, and governing the global endpoint management architecture across Windows, macOS, iOS platforms. This role drives the strategic evolution of modern workplace technologies, ensuring secure, scalable, and user-centric endpoint services aligned with enterprise business objectives. The Endpoint Architecture Engineer acts as the technical authority for endpoint management, identity integration, device security, lifecycle management, automation, and modern workplace transformations while partnering closely with Cybersecurity, Infrastructure, Service Management, and Digital Workplace teams Key Responsibilities Endpoint Architecture & Strategy - Define and maintain the global endpoint architecture roadmap - Design scalable Endpoint Management solutions using Microsoft Intune, Entra ID, Autopilot, Jamf Pro, and associated technologies. - Lead the transition from legacy endpoint management solutions toward cloud-native architectures - Establish endpoint standards, governance models, and design principles - Evaluate emerging technologies and provide strategic recommendations Modern Workplace Transformation - Design and implement Modern Device Management strategies - Develop architectures supporting native Entra ID joined devices - Lead large-scale endpoint migration initiatives - Drive endpoint automation, self-service, and zero-touch provisioning capabilities. - Support workplace modernization programs and digital employee experience initiatives Security & Compliance - Design endpoint security baselines and hardening standards - Partner with Cybersecurity teams to implement Zero Trust principles - Define compliance policies, conditional access strategies, and device governance controls - Ensure alignment with regulatory, privacy, and corporate security requirement - Review architectural impacts of endpoint-related security initiatives Platform Ownership - Govern Microsoft Intune, SCCM, Jamf Pro, Apple Business Manager, and related management platforms - Define architectural patterns for: Device enrollment Software distribution Patch management Endpoint security Device lifecycle management Remote support Configuration management - Ensure platform scalability, resilience, and operational excellence Automation & Integration - Design integrations with: ServiceNow Microsoft Graph Microsoft 365 Identity Management platforms Security platforms - Develop automation standards utilizing PowerShell, Graph API, and modern cloud technologies - Drive reduction of operational overhead through automated workflows Technical Leadership - Serve as highest-level technical escalation point for endpoint architecture topics - Mentor Endpoint Engineers and Platform Administrators - Lead architecture reviews and technical design sessions - Provide guidance to project teams and leadership - Contribute to global technology governance boards Required Qualifications - Bachelor's degree in Computer Science, Information Systems, or Engineering - 8+ years of experience in Endpoint Management, Workplace Engineering, or Infrastructure Architecture - 5+ years of experience with: Microsoft Intune Microsoft Entra ID Microsoft Autopilot Windows 11 Enterprise Preferred Qualifications - Microsoft Certified: Endpoint Administrator Associate Enterprise Administrator Expert Cybersecurity Architect Expert - JAMF and ITIL certifications - Experience with: DEX platforms (Nexthink, Lakeside) Conditional Access Privileged Access Management Endpoint Detection & Response Azure Automation Microsoft Graph API - Strong experience with: Jamf Pro Apple Business Manager macOS enterprise management - Advanced understanding of: Endpoint security Device compliance Identity and access management Zero Trust Architecture - Experience designing enterprise-scale endpoint solutions for global organizations Pay Range The annual salary for this position is between $96,000.00 - $192,000.00 annually. Factors which may affect pay within this range include, but are not limited to, skills, education, experience, and other unique qualifications of the successful candidate. The pay range will not be below the minimum wage applicable to the jurisdiction in which the applicant is to be employed. Other Compensation This position is entitled to short-term cash incentives, subject to plan requirements. Benefits Employees are eligible for benefits, including: - Health Care Benefits: Medical, Dental, Vision; Wellness incentives - Retirement Benefits - Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation - Disability: Short-term and long-term disability - Life Insurance and Accidental Death and Dismemberment - Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account - Tuition Assistance To learn more about our benefits offering, please click here Work with us | Carrier Corporate The specific benefits available to any employee may vary depending on state and local laws and eligibility factors, such as date of hire and the applicability of collective bargaining agreements. Application Deadline Applications will be accepted for at least 3 days from Job Posting Date: 22 September 2026 Use of AI Technology-enabled tools may support parts of the recruitment process, with oversight by people.