Domain Architect, Windows Endpoint

What You’ll Do:

• Architect & Innovate:
  Define and evolve endpoint management patterns leveraging Intune, SCCM, Autopilot, and cloud integrations.
• Technology Governance:
  Oversee BOAT (Bringing On Additional Technologies) reviews to ensure minimal overlap and compliance with deployment standards.
• Secure & Comply:
  Implement solutions aligned with SEC, SOX, PCI requirements, enforcing DLP, least privilege, and auditability.
• Modernize the Workplace:
  Drive adoption of Windows 11, Azure Virtual Desktop, and automation through Logic Apps, Runbooks, and other Azure tools.
• Optimize Operations:
  Reduce manual effort with automation (Power Shell, Git Hub Actions) and streamline support workflows.
• Collaborate & Align:
  Partner with engineering, security, and support teams to deliver solutions that meet business needs and technical standards.
• Document & Govern:
  Maintain architecture artifacts, reference models, and approval workflows (ARB/MCC/SAR/SARB).

Operating Systems:
Windows 10/11 (macOS experience a plus)

Endpoint Management:
Intune, SCCM, Autopilot, AVD (JAMF helpful)

Security Tools:
Crowd Strike, Tanium, Digital Guardian, Elastic SIEM

Cloud & Automation:
Azure, Logic Apps, Power Automate, Git Hub Actions

Networking:
Zscaler, Cisco/Aruba segmentation, firewall validation

Scripting & Dev Ops:
Power Shell, JSON, YAML, Git (C# legacy)

Compliance:
Data residency, export controls, audit logging, PII/PHI handling

Minimum of eight years related work experience, with at least three years in a technology architect role.

Undergraduate degree or equivalent combination of training and experience; graduate degree preferred.

Vanguard is not offering visa sponsorship for this position.