Description

*Role Summary* The WPT Delivery Endpoint Enterprise Lead is responsible for the architecture, engineering, and enterprise delivery of endpoint management platforms supporting modern workspace transformation. This role leads the design and implementation of cloud-first endpoint solutions using Microsoft Intune, MECM, Entra ID, Autopilot, and modern device security frameworks across the enterprise environment. The position serves as the senior technical lead for endpoint platform modernization, guiding engineering teams through transitions from traditional on-prem device management to modern cloud-managed, policy-driven, secure endpoint ecosystems. The role also provides technical leadership, mentorship, and solution governance across WPT initiatives. This position operates within a highly regulated environment and ensures endpoint platforms support secure, reliable, and scalable operations for clinical, operational, and enterprise users. *Key Responsibilities* *Endpoint Platform Architecture & Engineering* * Lead enterprise design of endpoint management platforms using Microsoft Intune, MECM, and Entra ID * Architect modern management solutions including Autopilot, co-management, and Azure AD joined devices * Design and implement endpoint security standards including BitLocker, Conditional Access, and MDM/MAM * Lead migration from legacy imaging and GPO-based management to modern policy-driven management * Define enterprise device lifecycle standards for Windows, mobile, and virtual endpoints * Establish endpoint configuration baselines, compliance policies, and automation frameworks *Workspace Platform Transformation (WPT)* * Lead technical execution of endpoint modernization initiatives * Drive cloud-first device management strategy * Support enterprise programs such as: * Windows lifecycle upgrades * Intune adoption * MECM modernization * Autopilot deployment * Group Policy to Intune migration * Device security compliance initiatives * Provide technical leadership during large-scale migrations and platform transitions * Design future-state endpoint architecture aligned to enterprise roadmap *Engineering Leadership* * Act as technical lead for endpoint engineering team * Mentor engineers in Intune, MECM, scripting, and modern management * Review designs and ensure adherence to architecture standards * Provide escalation support for complex endpoint issues * Lead discovery workshops, health checks, and solution reviews * Drive technical documentation standards (HLD / LLD / Runbooks) *Automation & Modern Management* * Develop automation using PowerShell and scripting frameworks * Lead OS deployment strategy including Autopilot and modern provisioning * Design co-management and hybrid management solutions * Implement application deployment frameworks and packaging standards * Lead device compliance and reporting solutions *Enterprise Delivery & Project Leadership* * Lead endpoint workstreams within large enterprise projects * Participate in architecture review boards * Provide technical guidance during vendor engagements * Deliver endpoint strategy presentations to leadership * Define implementation plans, milestones, and success criteria * Support multi-site enterprise deployments *Security & Compliance* * Ensure endpoint platforms meet enterprise security requirements * Support regulatory and audit compliance * Implement encryption, device compliance, and access controls * Partner with cybersecurity on endpoint hardening standards * Support incident response and remediation activities *Cross-Team Collaboration* * Work with: * Desktop Engineering * Mobility / MDM * Identity & Access Management * Security * Network * Cloud Engineering * Clinical Informatics * Infrastructure Operations * Align endpoint solutions with enterprise architecture * Ensure consistent standards across environments *Leadership Expectations* * Acts as enterprise technical authority for endpoint platforms * Drives modernization and transformation * Mentors and develops engineers * Ensures solutions are scalable, secure, and supportable * Leads by architecture, not just implementation *Preferred Qualifications* * 10+ years of endpoint / EUC / device management engineering experience * 5+ years Microsoft Intune / MEM experience * Strong experience with MECM / SCCM * Experience with Autopilot, Co-Management, and Azure AD Join * Experience with BitLocker, Conditional Access, MDM/MAM * Strong PowerShell scripting experience * Experience leading enterprise migrations * Experience mentoring engineers / leading technical teams * Microsoft certifications (MCSE, M365, Modern Desktop, etc.) * Experience in healthcare or regulated environment * Experience with large-scale device environments (5k+ endpoints) * Experience with cloud-first workspace strategy * Experience with Windows lifecycle / OS deployment * Experience with Group Policy to Intune migration * Experience with endpoint security frameworks *Required Qualifications* * Bachelor's or 4 years of work experience above the minimum qualification * 10+ years of experience