Principal Architect, IT Corporate Services

Section 2: Job Functions, Essential Duties and Responsibilities

Endpoint Architecture and Strategy

• Develop and execute the enterprise endpoint architecture strategy, standards, governance, and technology roadmaps for Windows, macOS, and mobile platforms.

• Own Windows and macOS operating system standards, upgrade planning, feature adoption, and endpoint configuration baselines.

• Lead endpoint technology planning and execution for acquisitions, divestitures, office openings and consolidations, migrations, and large-scale device refreshes.

Modern Endpoint Management

• Serve as technical owner for Microsoft Intune and the overall Modern Endpoint Management strategy, including architecture, design, implementation, governance, optimization, and operational ownership.

• Own Windows Autopilot, Apple Business Manager, Entra ID device registration, NinjaOne, Addigy, and related endpoint management technologies.

• Design and maintain endpoint enrollment, zero-touch provisioning, imaging, software distribution, patching, and device-management processes across supported platforms.

• Drive adoption of cloud-based endpoint management and automation while ensuring solutions remain secure, scalable, supportable, and aligned with enterprise requirements.

Endpoint Engineering and Configuration Management

• Design, test, implement, and govern end-user Group Policies in Active Directory and establish consistent enterprise endpoint configuration standards.

• Serve as the final technical escalation point for complex desktop engineering, application packaging, imaging, patching, Group Policy, software distribution, device enrollment, and endpoint-management issues.

• Own application packaging and compatibility standards; coordinate testing and implementation activities performed by Desktop Support and service provider teams.

• Provide technical direction to internal teams and service providers without direct supervisory responsibility.

Enterprise Mobility Services

• Establish and maintain the enterprise mobility strategy, standards, governance model, and technology roadmap for corporate mobile phones and tablets.

• Serve as the primary technology and vendor owner for T-Mobile, including service planning, escalations, technology evaluation, rate-plan and device-standard input, and roadmap alignment in partnership with Procurement.

• Define standards for mobile devices, operating systems, accessories, enrollment, eSIM, zero-touch provisioning, refresh, replacement, recovery, and retirement.

• Partner with Cybersecurity and operational teams to align mobility services with security, compliance, risk, and business continuity requirements.

Security and Risk Partnership

• Coordinate with Cybersecurity to design and implement endpoint security controls through Group Policy, Intune, and operating system configurations.

• Own BitLocker administration and governance while partnering with Cybersecurity on vulnerability remediation and Zero Trust initiatives.

• Participate in major incidents and security incidents involving endpoints, providing technical leadership for investigation, containment, remediation, and recovery activities.

• Contribute technical expertise to endpoint observability, compliance reporting, audit support, and operational metrics without serving as the primary owner of those functions.

Hardware, Vendor, Asset Lifecycle, and Licensing

• Lead evaluation, testing, selection, standardization, and lifecycle planning for enterprise laptops, desktops, mobile devices, peripherals, docking stations, and related end-user technologies.

• Serve as the primary technology owner for strategic endpoint hardware vendors, including Dell, Apple, and other providers; participate in vendor evaluations and contract negotiations in partnership with Procurement.

• Own the complete endpoint lifecycle, including deployment, refresh, recovery, secure disposition, and selection and oversight of asset recovery and eWaste vendors.

• Manage licensing and technology governance for endpoint software such as Adobe Acrobat, Snagit, and other end-user applications.

Automation and Continuous Improvement

• Develop and maintain PowerShell and other scripting solutions for endpoint provisioning, administration, software deployment, patching, remediation, and operational automation.

• Advance automation and standardization to reduce manual effort and improve the reliability, scalability, and consistency of endpoint operations.

• Evaluate emerging endpoint and mobility technologies, lead pilots, and recommend solutions that improve security, supportability, productivity, and associate experience.

Supervision

• No direct supervisory responsibilities are required in this position.

• Provides enterprise-wide technical leadership and architectural guidance for End User Computing, Endpoint Engineering, Modern Endpoint Management, and Enterprise Mobility Services.

• Leads through technical influence and coordination with Desktop Support, Service Desk, Infrastructure, Cybersecurity, Procurement, and third-party service providers.

• Serves as technology owner for endpoint management platforms, enterprise mobility services, hardware standards, endpoint lifecycle services, software licensing, and strategic vendor relationships.

Section 3: Experience, Skills, Knowledge Requirements

• Education: Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent relevant experience. A master’s degree is preferred.

• Extensive Experience: At least 10 years of progressive information technology experience, including substantial experience in endpoint architecture, desktop engineering, endpoint management, or End User Computing technical leadership.

• Large-Scale Endpoint Expertise: Demonstrated experience supporting large enterprise environments across Windows, macOS, and mobile platforms, including endpoint standards, operating system lifecycle management, configuration baselines, application packaging, software distribution, patching, imaging, and provisioning.

• Modern Endpoint Management: Deep hands-on knowledge of Microsoft Intune, Windows Autopilot, Apple Business Manager, Entra ID device registration, Group Policy, BitLocker, and endpoint management platforms such as NinjaOne and Addigy.

• Scripting and Automation: Strong PowerShell scripting skills are required. Experience using APIs and other automation frameworks to improve endpoint provisioning, deployment, management, remediation, and operational efficiency is preferred.

• Enterprise Mobility: Experience establishing mobile device standards, managing carrier and vendor relationships, and governing mobile enrollment, provisioning, lifecycle, and support technologies.

• Vendor and Lifecycle Management: Experience serving as a technology owner for strategic vendors and managing hardware standards, refresh programs, software licensing, asset recovery, secure disposition, and eWaste services in partnership with Procurement and operational teams.

• Security Partnership: Experience implementing endpoint security controls and partnering with Cybersecurity on vulnerability remediation, encryption, security incidents, audits, and Zero Trust initiatives.

• Leadership and Communication: Excellent organization, analytical, decision-making, communication, and interpersonal skills. Demonstrated ability to influence technical direction, coordinate across teams and service providers, and explain complex concepts to technical and business stakeholders.

• Certifications: Relevant endpoint administration and management certifications are preferred but not required, including Microsoft endpoint or Microsoft 365 certifications, Apple device management certifications, ITIL, NinjaOne, Addigy, or comparable credentials.

• Availability: Ability to participate in scheduled non-business-hour implementation and maintenance activities and in major incident or security incident response when required.