Bessemer Trust is seeking an experienced Enterprise Desktop Architect to join our Desktop Engineering team. This senior, hands-on technical role is responsible for defining and continuously evolving the firm's endpoint computing architecture across physical desktops, laptops, virtual desktops, and modern endpoint management platforms.
The successful candidate will combine deep technical expertise with architectural vision and strong engineering judgment. This individual will challenge established practices, evaluate emerging technologies, and define an endpoint standard optimized for performance, reliability, security, supportability, and end-user experience.
The role requires the ability to work closely with Information Security and other technology teams to understand risk, quantify the operational and performance impact of security controls, and recommend solutions that provide the appropriate balance between security and functionality.
This position is based in our Woodbridge, NJ office with a hybrid schedule of three days in the office and two days remote each week.
Primary ResponsibilitiesEndpoint Strategy & Architecture- Define and maintain the firm's enterprise endpoint architecture and technology roadmap across desktops, laptops, VDI, endpoint management, identity integration, and application delivery.
- Establish and continuously reassess the enterprise desktop standard rather than accepting existing technologies, configurations, or practices by default.
- Design, build, and optimize Windows 11 and endpoint configurations for performance, stability, reliability, security, and user experience.
- Evaluate endpoint hardware, software, security technologies, management platforms, and emerging capabilities through technical analysis, benchmarking, proof-of-concepts, and pilots.
- Define standards for provisioning, configuration management, patching, compliance, endpoint lifecycle management, and automation.
- Drive adoption of automated application packaging, deployment, patching, and lifecycle management using Tanium and other endpoint-management technologies, reducing reliance on manual deployment processes.
- Translate business and technical requirements into scalable, supportable enterprise solutions.
Security, Performance & User Experience- Partner with Information Security to evaluate endpoint security technologies, configurations, and controls.
- Assess security controls in the context of risk reduction, endpoint performance, usability, operational complexity, and supportability, and recommend appropriate trade-offs.
- Implement and mature Digital Employee Experience (DEX) and endpoint analytics capabilities, defining meaningful technical and user-experience metrics, baselines, and service-level objectives.
- Use endpoint telemetry, performance testing, DEX metrics, and operational data to proactively identify performance degradation, recurring issues, and opportunities for improvement.
- Provide hands-on architectural leadership for complex endpoint incidents and drive root-cause analysis and permanent corrective actions.
- Develop automation and engineering solutions that improve consistency, reliability, and operational efficiency.
Technical Leadership- Serve as the senior technical authority and hands-on technical escalation point for Desktop Engineering.
- Challenge legacy approaches and drive adoption of modern engineering practices and technologies where they provide measurable benefit.
- Establish engineering, testing, deployment, documentation, and configuration standards.
- Mentor engineers and provide technical leadership for complex or high-impact initiatives.
- Partner across Information Security, Identity, Networking, Infrastructure, Application Delivery, Desktop Support, and other technology teams.
- Evaluate vendor solutions and provide technical recommendations for technology selection and strategic investments.
Microsoft 365 - Desired ExperienceMicrosoft 365 administration experience is desirable but secondary to endpoint architecture responsibilities. Relevant experience includes Microsoft Purview policy and governance, Microsoft 365 Apps configuration and deployment, SharePoint Online external-sharing controls, Entra ID and Conditional Access, and integration with security, monitoring, compliance, and endpoint-management platforms.
Qualifications- 8+ years of experience in Desktop Engineering, Endpoint Engineering, Workplace Technology, Infrastructure Engineering, or a related discipline.
- Demonstrated experience functioning as a senior engineer, technical lead, or enterprise endpoint architect within a large organization.
- Demonstrated ability to develop endpoint architecture and technology strategy and successfully challenge existing designs, technologies, and operational practices.
- Advanced hands-on knowledge of Windows 11 Enterprise architecture, configuration, optimization, deployment, and troubleshooting.
- Strong experience with Microsoft Intune and modern endpoint management.
- Strong knowledge of Microsoft Entra ID, Active Directory, Group Policy, Conditional Access, and identity/device-management concepts.
- Experience with Tanium or comparable endpoint-management platforms, including application deployment, patching, automation, and endpoint telemetry.
- Experience with DEX, endpoint analytics, performance monitoring, benchmarking, and defining measurable endpoint experience and performance metrics.
- Strong PowerShell scripting and automation skills.
- Experience with enterprise endpoint security technologies and understanding their impact on endpoint performance and user experience.
- Experience with virtual desktop technologies such as Citrix Virtual Apps and Desktops/DaaS, VMware Horizon, Azure Virtual Desktop, FSLogix, or similar platforms.
- Experience supporting large-scale enterprise endpoint environments.
- Experience in financial services or another highly regulated environment is preferred.
The successful candidate will demonstrate strong architectural and systems thinking, intellectual curiosity, sound technical judgment, excellent troubleshooting abilities, and the confidence to challenge established practices and advocate for better solutions.
The base salary range for this position is $140,000 - $180,000 per year. This range reflects the minimum and maximum base salary we reasonably expect to pay for this role. In addition, this position may be eligible to participate in the relevant business unit's incentive compensation plan, and other compensation programs as applicable. Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution, medical, prescription dental, and vision coverage; life insurance; disability coverage; paid holidays; vacation; and sick time, subject to plan terms and Company policies.
