Windows & Endpoint Management Architect

Job Summary

This position is responsible for defining future-state architecture, technology standards, governance practices, and strategic roadmaps for Digital Workplace Technologies team. This role provides technical leadership for the Windows endpoint environment, including Microsoft Configuration Manager (MECM), Microsoft Intune, and Windows servicing and patching, as well as digital employee experience, device lifecycle management, software delivery, automation, vulnerability management, workplace security technologies, and enterprise workplace modernization.

Job Summary

This position is responsible for defining future-state architecture, technology standards, governance practices, and strategic roadmaps for Digital Workplace Technologies team. This role provides technical leadership for the Windows endpoint environment, including Microsoft Configuration Manager (MECM), Microsoft Intune, and Windows servicing and patching, as well as digital employee experience, device lifecycle management, software delivery, automation, vulnerability management, workplace security technologies, and enterprise workplace modernization.

The role serves as a strategic technical leader, driving modernization efforts, architecture governance, technology innovation, and alignment while ensuring solutions remain secure, scalable, resilient, supportable, and aligned with Southern Company business objectives.

The architect level will depend on the candidate’s skills, experience, and demonstrated ability to perform the responsibilities of the role.

This position requires onsite work three (3) days per week at either our Atlanta, GA, or Birmingham, AL location.

JOB REQUIREMENTS Technical Skills Required

• Expert-level design and administration of Microsoft Configuration Manager (MECM) and Microsoft Intune in large enterprise environments, including Config Mgr and Intune co-management, application and OS deployment, and client health.
• Deep knowledge of Windows 10/11 servicing and patching, including update ring strategy, Windows Update for Business or Autopatch, and patch compliance reporting.
• Strong knowledge of Active Directory, Group Policy, Microsoft Entra , and Windows Server infrastructure as they relate to endpoint management.
• Strong understanding of endpoint security and vulnerability remediation, including security baselines, Bit Locker, privileged access and least-privilege controls, certificate management, and zero-trust principles.
• Advanced Power Shell scripting and automation, including APIs, WMI, and orchestration platforms, to automate deployment, remediation, configuration, and reporting.
• Experience developing architecture roadmaps, reference architecture, design standards, and governance frameworks for enterprise endpoint platforms.
• Demonstrated ability to lead design reviews and make risk-based architecture recommendations on high-visibility initiatives.

Technical Skills Preferred

• Experience with Digital Employee Experience (DEX) and endpoint analytics platforms, such as Nexthink, plus automation and self-healing capabilities.
• Experience with Windows Autopilot, Microsoft Connected Cache, and Delivery Optimization to manage content delivery and network impact.
• Experience building endpoint health and compliance reporting with SQL Server and Power BI.

Education And Experience Requirements

• Bachelor’s degree in computer science, Information Systems, Engineering, or related field required. Advanced degree preferred.
• 10+ years of Information Technology experience, including 5+ years of technical leadership, enterprise solution design, architecture planning, or strategic technology planning experience.
• Travel as needed.

Major

Job Responsibilities

• Develops, governs, and maintains strategic architecture roadmaps for…