Senior Infrastructure Architect (Microsoft Autopilot)

Blue Star Partners•Columbus, OH

28d•$75 - $90•Hybrid

About The Position

We are seeking an experienced Microsoft Autopilot and Entra ID Transition Architect to lead the enterprise modernization initiative transitioning from Hybrid Azure AD Join to cloud-native Entra Join. This position requires deep technical expertise in Microsoft Autopilot, Intune, and Entra ID, along with the strategic leadership needed to deliver a seamless transformation of identity and device management across a large enterprise environment. The ideal candidate will also lead the enterprise Windows 10 to Windows 11 upgrade, ensuring compatibility with GlobalProtect VPN, enterprise security standards, and modern device management practices.

Requirements

Proven experience with Microsoft Autopilot, Intune, and Entra ID (Azure AD).
Deep understanding of identity models, including Hybrid Azure AD Join and Entra Join.
Hands-on experience managing and upgrading Windows 10/11 enterprise environments.
Familiarity with GlobalProtect VPN configuration and troubleshooting.
Proficiency in PowerShell scripting for automation, auditing, and reporting.
Understanding of enterprise security protocols, compliance frameworks, and zero-trust architecture.
Strong ability to assess existing identity and OS architectures and develop modernization roadmaps.
Demonstrated success leading enterprise-scale migrations or transformations.
Exceptional documentation, communication, and stakeholder engagement skills.
Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

Nice To Haves

Microsoft certifications such as MS-100, MS-101, MD-102, or Enterprise Administrator Expert.
Experience supporting Intune/Autopilot deployments in regulated or security-sensitive environments.
Prior involvement in enterprise endpoint modernization or MDM transformation initiatives.

Responsibilities

Enterprise Identity Transition Lead assessment and planning for converting devices from Hybrid Azure AD Join to Entra Join.
Develop and execute a phased migration strategy aligned with enterprise security, compliance, and operational requirements.
Partner with infrastructure, network, and security teams to ensure a seamless transition across systems.
Design and implement Microsoft Autopilot profiles optimized for Entra Join environments.
Integrate Autopilot, Intune, and Entra ID for zero-touch provisioning and device lifecycle automation.
Ensure provisioning workflows meet modern management and enterprise security standards.
Plan and oversee the enterprise-wide Windows 11 upgrade initiative.
Validate hardware and application compatibility across device fleets.
Coordinate testing, pilot deployment, and enterprise rollout to minimize disruption.
Ensure compatibility of Autopilot and Entra Join configurations with GlobalProtect VPN.
Collaborate with network and security teams to align VPN policies and authentication requirements.
Troubleshoot and resolve connectivity or identity-related issues during and post-migration.
Partner with project managers to define project scope, milestones, and deliverables.
Provide technical direction and architectural leadership throughout the project lifecycle.
Communicate project progress, risks, and mitigation strategies to leadership and stakeholders.
Create and maintain detailed documentation for Entra Join configurations, Autopilot deployments, and OS migration procedures.
Develop training and reference materials for IT administrators and end-users.
Maintain comprehensive logs of issues, resolutions, and lessons learned.
Monitor and optimize Entra Join, Autopilot, and Windows 11 environments.
Troubleshoot identity, provisioning, and VPN issues in collaboration with support teams.
Stay informed of Microsoft's latest best practices and feature updates.