Enterprise Desktop Architect

Bessemer Trust•Woodbridge Township, NJ

13d•$140,000 - $180,000•Hybrid

About The Position

Bessemer Trust is seeking an experienced Enterprise Desktop Architect to join its Desktop Engineering team. This senior, hands-on technical role defines and continuously evolves the firm’s endpoint computing architecture across physical desktops, laptops, virtual desktops, and modern endpoint management platforms. The role combines deep technical expertise, architectural vision, and engineering judgment to establish endpoint standards optimized for performance, reliability, security, supportability, and user experience. The architect partners closely with Information Security and other technology teams to understand risk, evaluate the operational and performance impacts of security controls, and recommend an appropriate balance between security and functionality. The role also serves as the senior technical authority and escalation point for Desktop Engineering, providing hands-on leadership for complex incidents, technical standards, and strategic initiatives. The position is based in Bessemer Trust’s Woodbridge, New Jersey office, with a hybrid schedule of three days in the office and two days remote each week. The base salary range is $140,000–$180,000 per year. The position may also be eligible for incentive compensation and other compensation programs.

Requirements

At least 8 years of experience in Desktop Engineering, Endpoint Engineering, Workplace Technology, Infrastructure Engineering, or a related discipline.
Demonstrated experience as a senior engineer, technical lead, or enterprise endpoint architect within a large organization.
Demonstrated ability to develop endpoint architecture and technology strategy and challenge existing designs, technologies, and operational practices.
Advanced hands-on knowledge of Windows 11 Enterprise architecture, configuration, optimization, deployment, and troubleshooting.
Strong experience with Microsoft Intune and modern endpoint management.
Strong knowledge of Microsoft Entra ID, Active Directory, Group Policy, Conditional Access, and identity/device-management concepts.
Experience with Tanium or comparable endpoint-management platforms, including application deployment, patching, automation, and endpoint telemetry.
Experience with DEX, endpoint analytics, performance monitoring, benchmarking, and defining measurable endpoint experience and performance metrics.
Strong PowerShell scripting and automation skills.
Experience with enterprise endpoint security technologies and understanding of their impact on endpoint performance and user experience.
Experience with virtual desktop technologies such as Citrix Virtual Apps and Desktops/DaaS, VMware Horizon, Azure Virtual Desktop, FSLogix, or similar platforms.
Experience supporting large-scale enterprise endpoint environments.
Strong architectural and systems thinking, intellectual curiosity, sound technical judgment, excellent troubleshooting abilities, and confidence in advocating for better solutions.

Nice To Haves

Experience in financial services or another highly regulated environment.
Microsoft 365 administration experience, including Microsoft Purview policy and governance, Microsoft 365 Apps configuration and deployment, SharePoint Online external-sharing controls, Entra ID and Conditional Access, and integration with security, monitoring, compliance, and endpoint-management platforms.

Responsibilities

Define and maintain the enterprise endpoint architecture and technology roadmap across desktops, laptops, VDI, endpoint management, identity integration, and application delivery.
Establish and continually reassess enterprise desktop standards rather than defaulting to existing technologies, configurations, or practices.
Design, build, and optimize Windows 11 and endpoint configurations for performance, stability, reliability, security, and user experience.
Evaluate endpoint hardware, software, security technologies, management platforms, and emerging capabilities through technical analysis, benchmarking, proof-of-concepts, and pilots.
Define standards for provisioning, configuration management, patching, compliance, endpoint lifecycle management, and automation.
Drive automated application packaging, deployment, patching, and lifecycle management using Tanium and other endpoint-management technologies, reducing reliance on manual processes.
Translate business and technical requirements into scalable, supportable enterprise solutions.
Partner with Information Security to evaluate endpoint security technologies, configurations, and controls.
Assess security controls in terms of risk reduction, endpoint performance, usability, operational complexity, and supportability, and recommend appropriate trade-offs.
Implement and mature Digital Employee Experience (DEX) and endpoint analytics capabilities, including meaningful technical and user-experience metrics, baselines, and service-level objectives.
Use endpoint telemetry, performance testing, DEX metrics, and operational data to identify performance degradation, recurring issues, and improvement opportunities.
Provide hands-on architectural leadership for complex endpoint incidents, root-cause analysis, and permanent corrective actions.
Develop automation and engineering solutions that improve consistency, reliability, and operational efficiency.
Serve as Desktop Engineering’s senior technical authority and hands-on technical escalation point.
Challenge legacy approaches and drive adoption of modern engineering practices and technologies where they provide measurable benefit.
Establish engineering, testing, deployment, documentation, and configuration standards.
Mentor engineers and provide technical leadership for complex or high-impact initiatives.
Partner with Information Security, Identity, Networking, Infrastructure, Application Delivery, Desktop Support, and other technology teams.
Evaluate vendor solutions and provide technical recommendations for technology selection and strategic investments.

Benefits

Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution.
Medical, prescription, dental, and vision coverage; the employee benefits section states that employee medical, dental, and vision coverage has zero contributions.
Life insurance and disability coverage, including short- and long-term disability coverage.
Paid holidays, vacation, and sick time, subject to plan terms and Company policies.
Discretionary annual bonus for select positions.
Tuition reimbursement support.
Employee assistance program and wellness programs.
Hybrid work environment.
Paid parental leave.
Legal services and financial wellness plans at no cost to employees.