Enterprise Desktop Architect

Bessemer Trust • Woodbridge, NJ

13d • Hybrid

About The Position

Bessemer Trust is seeking a senior, hands-on Enterprise Desktop Architect to define and continuously evolve the firm’s endpoint computing architecture across physical desktops, laptops, virtual desktops, and modern endpoint-management platforms. The role combines deep technical expertise, architectural vision, and engineering judgment to establish an endpoint standard optimized for performance, reliability, security, supportability, and end-user experience. The architect will evaluate emerging technologies and established practices, and work closely with Information Security and other technology teams to assess the risk, operational impact, and performance effects of security controls and recommend appropriate trade-offs.

Based in the Woodbridge, New Jersey office, the position follows a hybrid schedule of three days in the office and two days remote each week. The architect will set endpoint strategy and standards, lead technical evaluations and engineering improvements, support complex incidents, and serve as the senior technical authority for Desktop Engineering. Microsoft 365 administration experience is desirable but secondary to endpoint architecture responsibilities.

Bessemer Trust is a privately owned family office and wealth manager with more than 1,300 employees, overseeing more than $250 billion in assets for over 3,000 individuals and families. The firm has 22 offices and is committed to a collaborative culture and putting clients’ interests first.

Requirements

• At least 8 years of experience in Desktop Engineering, Endpoint Engineering, Workplace Technology, Infrastructure Engineering, or a related discipline.
• Demonstrated experience as a senior engineer, technical lead, or enterprise endpoint architect within a large organization.
• Demonstrated ability to develop endpoint architecture and technology strategy and successfully challenge existing designs, technologies, and operational practices.
• Advanced hands-on knowledge of Windows 11 Enterprise architecture, configuration, optimization, deployment, and troubleshooting.
• Strong experience with Microsoft Intune and modern endpoint management.
• Strong knowledge of Microsoft Entra ID, Active Directory, Group Policy, Conditional Access, and identity and device-management concepts.
• Experience with Tanium or comparable endpoint-management platforms, including application deployment, patching, automation, and endpoint telemetry.
• Experience with DEX, endpoint analytics, performance monitoring, benchmarking, and defining measurable endpoint-experience and performance metrics.
• Strong PowerShell scripting and automation skills.
• Experience with enterprise endpoint security technologies and understanding of their impact on endpoint performance and user experience.
• Experience with virtual desktop technologies such as Citrix Virtual Apps and Desktops/DaaS, VMware Horizon, Azure Virtual Desktop, FSLogix, or similar platforms.
• Experience supporting large-scale enterprise endpoint environments.
• Strong architectural and systems thinking, intellectual curiosity, sound technical judgment, excellent troubleshooting abilities, and confidence to challenge established practices and advocate for better solutions.

Nice To Haves

• Experience in financial services or another highly regulated environment.
• Microsoft 365 administration experience, including Microsoft Purview policy and governance, Microsoft 365 Apps configuration and deployment, SharePoint Online external-sharing controls, Entra ID and Conditional Access, and integration with security, monitoring, compliance, and endpoint-management platforms.

Responsibilities

• Define and maintain the enterprise endpoint architecture and technology roadmap across desktops, laptops, VDI, endpoint management, identity integration, and application delivery.
• Establish and continuously reassess enterprise desktop standards rather than accepting existing technologies, configurations, or practices by default.
• Design, build, and optimize Windows 11 and endpoint configurations for performance, stability, reliability, security, and user experience.
• Evaluate endpoint hardware, software, security technologies, management platforms, and emerging capabilities through technical analysis, benchmarking, proofs of concept, and pilots.
• Define standards for provisioning, configuration management, patching, compliance, endpoint lifecycle management, and automation.
• Drive automated application packaging, deployment, patching, and lifecycle management using Tanium and other endpoint-management technologies, reducing reliance on manual processes.
• Translate business and technical requirements into scalable, supportable enterprise solutions.
• Partner with Information Security to evaluate endpoint security technologies, configurations, and controls.
• Assess security controls in relation to risk reduction, endpoint performance, usability, operational complexity, and supportability, and recommend appropriate trade-offs.
• Implement and mature Digital Employee Experience and endpoint analytics capabilities, including defining technical and user-experience metrics, baselines, and service-level objectives.
• Use endpoint telemetry, performance testing, DEX metrics, and operational data to identify performance degradation, recurring issues, and improvement opportunities.
• Provide hands-on architectural leadership for complex endpoint incidents, drive root-cause analysis, and implement permanent corrective actions.
• Develop automation and engineering solutions that improve consistency, reliability, and operational efficiency.
• Serve as the senior technical authority and hands-on technical escalation point for Desktop Engineering.
• Challenge legacy approaches and promote modern engineering practices and technologies where they provide measurable benefit.
• Establish engineering, testing, deployment, documentation, and configuration standards.
• Mentor engineers and provide technical leadership for complex or high-impact initiatives.
• Partner with Information Security, Identity, Networking, Infrastructure, Application Delivery, Desktop Support, and other technology teams.
• Evaluate vendor solutions and provide technical recommendations for technology selection and strategic investments.

Benefits

• Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution.
• Medical and prescription coverage.
• Dental and vision coverage.
• Life insurance.
• Disability coverage, including employer-paid short- and long-term disability coverage for eligible employees.
• Paid holidays.
• Vacation and sick time.
• Discretionary annual bonus for select positions.
• Tuition reimbursement support.
• Employee assistance program and wellness programs.
• Hybrid work environment for most positions.
• Paid time off and paid parental leave.
• Legal services and financial wellness plans at no cost to employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed