Infrastructure Architect L3

We are seeking an Endpoint Migration Subject Matter Expert (SME) to provide technical leadership for a large-scale Windows endpoint migration program. This role will own the endpoint migration strategy, guide engineering teams through migration activities, and ensure successful transition of devices across Active Directory, Microsoft Entra , Intune, and Autopilot environments. The ideal candidate will have deep expertise in enterprise endpoint migrations, Quest On Demand Migration (ODM), and Microsoft endpoint management technologies.

Lead the technical design and execution of enterprise Windows endpoint migrations.

Serve as the SME for Hybrid AD, Entra , and Entra-only device migration patterns.

Configure and support Quest On Demand Migration (ODM) including device matching, directory synchronization, migration profiles, cutovers, and validation activities.

Define migration success criteria, readiness assessments, rollback strategies, and exception processes.

Provide technical leadership for Active Directory, Entra , Intune, Autopilot, Group Policy, and endpoint security migrations.

Troubleshoot and resolve complex migration issues involving identity, authentication, certificates, device enrollment, networking, and policy management.

Review migration scripts, automation, runbooks, and configuration changes to ensure production readiness.

Support pilot migrations, production deployment waves, and hypercare activities.

Collaborate with engineering, security, networking, identity, and application teams to resolve cross-functional dependencies.

Maintain technical documentation, operational procedures, knowledge articles, and migration standards.

8+ years of experience supporting enterprise Windows environments.

Proven experience leading large-scale endpoint migration initiatives.

Strong hands‑on experience with Active Directory, Microsoft Entra , and Microsoft Intune.

Experience implementing and supporting Windows Autopilot deployments.

Advanced troubleshooting skills spanning endpoint management, identity, authentication, certificates, and device provisioning.

Experience designing migration waves, pilot programs, rollout plans, and rollback procedures.

Strong communication and stakeholder engagement skills.

Ability to lead technical discussions and provide guidance across multiple engineering teams.

Quest On Demand Migration (ODM)

Active Directory

Windows 10/11

Power Shell

Group Policy (GPO)

Bit Locker

Conditional Access

PKI / Certificate Management

DNS

VPN Technologies

Migration Planning & Execution

Cutover & Rollback Management

The pay range that the employer in good faith reasonably expects to pay for this position is $42.35/hour - $66.18/hour. Our offered benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis. Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence.

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and;

maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.