Overview In this role you lead enterprise endpoint strategy and architecture, owning end-user computing across Windows, macOS, and mobile platforms. You will govern endpoint platforms, standards, and security in collaboration with Cybersecurity and operations. You'll guide large-scale deployments, migrations, and device refresh programs while driving cloud-based management adoption. This is a strategic, hands-on leadership role focused on scalable, secure endpoint outcomes that support the organization's mission.
Responsibilities- Define and execute the enterprise endpoint architecture strategy and roadmaps for Windows, macOS, and mobile platforms
- Own OS standards, upgrade planning, feature adoption, and baseline configurations
- Lead large-scale device refreshes, acquisitions, divestitures, and office openings from an endpoint perspective
- Act as technical owner for Microsoft Intune, Windows Autopilot, Apple Business Manager, Entra ID, NinjaOne, and Addigy
- Design enrollment, zero-touch provisioning, imaging, software distribution, patching, and device-management processes
- Implement and govern Group Policy, BitLocker, and endpoint security controls in coordination with Cybersecurity
- Provide technical direction and escalation support for desktop engineering, imaging, packaging, and software distribution
- Oversee hardware standards, lifecycle management, licensing, and vendor relationships (Dell, Apple, etc.)
- Develop automation (PowerShell and APIs) to improve provisioning, deployment, and remediation
- Partner with Procurement and service providers to ensure secure, scalable endpoint solutions
Key requirements- 10+ years of progressive IT experience with strong leadership in endpoint architecture or End User Computing
- Extensive experience supporting Windows, macOS, and mobile endpoints and managing OS lifecycle, baselines, and packaging
- Deep hands-on knowledge of Intune, Autopilot, Apple Business Manager, Entra ID, Group Policy, BitLocker, and endpoint management tools (NinjaOne, Addigy)
- Strong PowerShell scripting skills; API/automation experience preferred
- Security-focused with ability to partner with Cybersecurity on vulnerabilities, Zero Trust, and incidents
- Excellent communication and cross-team influence capabilities; ability to explain complex concepts to technical and non-technical stakeholders
- Vendor lifecycle and asset management experience (hardware standards, licensing, eWaste)
- Availability for non-business-hour activities and incident response
- Bachelor in Computer Science, Information Systems, or related field; master's preferred
- leadership
- strong communication
- influence without authority
- Microsoft Intune
- Windows Autopilot
- Apple Business Manager
