Digital Cloud Architect

We are seeking a highly skilled and experienced Platforms Architect to join our team. The ideal candidate will have extensive knowledge and hands‑on experience with Windows Server & Client along with SCCM & Intune. Above 10 years of experience with English and Arabic is required.

• Experience with deployment technologies such as WDS and MDT.
• Experience with high‑availability technologies such as storage, backup, and Hyper‑V.
• Expertise on storage SAN/NAS/DAS and understanding of storage architecture.
• Experience with virtualization (Hyper‑V) including monolithic and microkernel, ring architecture.
• Experience with VHD/AVHDX merging, checking integrity of differencing chains.
• Experience with failover operations: planned failover, test failure, unplanned failover.
• Experience with Hyper‑V migration.
• Knowledge of Windows as a service, deployment rings, co‑management with MEMCM (an added advantage).
• Experience troubleshooting Windows update issues and understanding component‑based servicing.
• Experience with patch management and Windows Server Update Services (WSUS).
• Knowledge of Windows Server OS, including NTFS/share permissions, file sharing, performance monitoring, event logging, task manager, firewall, user/group management.
• Knowledge of WMI and familiarity with WMI queries.
• Understanding of Active Directory concepts such as Kerberos, LDAP, sites, and security groups.
• Knowledge of TCP/IP and networking services: DNS, WINS, DHCP, routing.
• Exceptional problem‑solving and communication skills in English, both spoken and written.

• Broad knowledge of Windows Server, Windows 10, and Windows 11 platforms, including deployment, management, and troubleshooting.
• Expertise in Windows 365, Azure Virtual Desktop integration.
• Proficiency in Microsoft Intune for device management, application deployment, security baselines, and dynamic provisioning.
• Experience with Windows Hello for Business, Windows Sandbox Management, and Endpoint Analytics for Windows 11.
• Ability to manage and configure Windows 365 Cloud PCs.
• Windows 10/11 – Deployment, configuration, troubleshooting.
• Windows 365 Cloud PC – provisioning, optimization, licensing, performance tuning.
• Entra  (Azure AD) - hybrid join & Entra join, configuration, troubleshooting.
• Windows Update for Business configuration and compliance.
• LAPS (Local Administrator Password Solution) & Windows LAPS configuration and management.
• KMS/MAK licensing management.
• Windows 365 vs. Azure Virtual Desktop use‑case comparison and best practices.
• Network and bandwidth tuning for Cloud PC performance.
• Microsoft Defender for Endpoint – security policies, monitoring, integrations.
• Conditional Access & Device Compliance – enforcing security baselines, Bit Locker, Windows Hello for Business.
• Security standards & baselines – NIST 800‑53, Zero Trust principles.
• Application Management & Deployment – Winget, MSIX packaging, Microsoft Store for Business, private store.
• Identity & Authentication – Entra AD, hybrid join, single‑sign‑on, MFA, RBAC.
• Networking & Connectivity – VPN, Always‑On VPN, Cloud PC networking, Wi‑Fi authentication, DNS, DHCP, firewall basics.
• Monitoring & troubleshooting – Event logs, performance logs, Defender logs, Sysinternals tools, Remote Desktop.
• Problem‑solving mindset, scripting & automation (Power Shell), documentation & knowledge sharing, collaboration across teams.

• Provide Tier 3 support to customers for technical requests related to SCCM and Intune.
• Proactively review customer concerns and recommend improvements to endpoint management, user experience, and policy compliance.
• Investigate and resolve requests related to SCCM: application deployment, task sequences, driver packages, software update groups, boundaries, distribution point health, and client push installation.
• Investigate and resolve requests related to Intune: device compliance policies, configuration profiles, app protection policies, Autopilot deployment profiles, and co‑management setup.
• Support mobile device management requests, including enrollment and management of iOS, Android, and Windows 10/11 devices, and mobile app deployment…