Domain Architect, Windows Endpoint

Vanguard • Dallas, TX

61d • Hybrid

About The Position

Are you passionate about shaping the future of workplace technology? As a Windows Endpoint Domain Architect, you'll lead the design and evolution of infrastructure architecture for 30,000+ Windows endpoints, driving secure, scalable, and modern solutions that enhance user experience and reduce operational overhead. This is your opportunity to influence enterprise-wide standards and deliver cutting-edge capabilities that keep us ahead of the curve. This hybrid role (in office Tues-Wed-Thurs) can be based in either Charlotte, NC, Dallas, TX, or Malvern, PA What You'll Do: Architect & Innovate: Define and evolve endpoint management patterns leveraging Intune, SCCM, Autopilot, and cloud integrations. Technology Governance: Oversee BOAT (Bringing On Additional Technologies) reviews to ensure minimal overlap and compliance with deployment standards. Secure & Comply: Implement solutions aligned with SEC, SOX, PCI requirements, enforcing DLP, least privilege, and auditability. Modernize the Workplace: Drive adoption of Windows 11, Azure Virtual Desktop, and automation through Logic Apps, Runbooks, and other Azure tools. Optimize Operations: Reduce manual effort with automation (PowerShell, GitHub Actions) and streamline support workflows. Collaborate & Align: Partner with engineering, security, and support teams to deliver solutions that meet business needs and technical standards. Document & Govern: Maintain architecture artifacts, reference models, and approval workflows (ARB/MCC/SAR/SARB). Your Expertise: Operating Systems: Windows 10/11 (macOS experience a plus) Endpoint Management: Intune, SCCM, Autopilot, AVD (JAMF helpful) Security Tools: CrowdStrike, Tanium, Digital Guardian, Elastic SIEM Cloud & Automation: Azure, Logic Apps, Power Automate, GitHub Actions Networking: Zscaler, Cisco/Aruba segmentation, firewall validation Scripting & DevOps: PowerShell, JSON, YAML, Git (C# legacy) Compliance: Data residency, export controls, audit logging, PII/PHI handling

Requirements

• Windows 10/11
• Intune
• SCCM
• Autopilot
• AVD
• CrowdStrike
• Tanium
• Digital Guardian
• Elastic SIEM
• Azure
• Logic Apps
• Power Automate
• GitHub Actions
• Zscaler
• Cisco/Aruba segmentation
• firewall validation
• PowerShell
• JSON
• YAML
• Git
• Data residency
• export controls
• audit logging
• PII/PHI handling
• Minimum of eight years related work experience, with at least three years in a technology architect role.
• Undergraduate degree or equivalent combination of training and experience

Nice To Haves

• macOS experience
• JAMF helpful
• C# legacy
• graduate degree preferred.

Responsibilities

• Define and evolve endpoint management patterns leveraging Intune, SCCM, Autopilot, and cloud integrations.
• Oversee BOAT (Bringing On Additional Technologies) reviews to ensure minimal overlap and compliance with deployment standards.
• Implement solutions aligned with SEC, SOX, PCI requirements, enforcing DLP, least privilege, and auditability.
• Drive adoption of Windows 11, Azure Virtual Desktop, and automation through Logic Apps, Runbooks, and other Azure tools.
• Reduce manual effort with automation (PowerShell, GitHub Actions) and streamline support workflows.
• Partner with engineering, security, and support teams to deliver solutions that meet business needs and technical standards.
• Maintain architecture artifacts, reference models, and approval workflows (ARB/MCC/SAR/SARB).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Funds, Trusts, and Other Financial Vehicles
• Number of Employees: 5,001-10,000 employees