Windows & Endpoint Management Architect

Southern Company•Birmingham, AL

1d•Hybrid

About The Position

This role defines future-state architecture, technology standards, governance practices, and strategic roadmaps for the Digital Workplace Technologies team. It provides technical leadership for the Windows endpoint environment, including Microsoft Configuration Manager (MECM), Microsoft Intune, Windows servicing and patching, digital employee experience, device lifecycle management, software delivery, automation, vulnerability management, workplace security technologies, and enterprise workplace modernization. The architect level will depend on the candidate’s skills, experience, and demonstrated ability to perform the responsibilities of the role. The position requires onsite work three days per week at either the Atlanta, Georgia, or Birmingham, Alabama location. Travel is required as needed. The role drives modernization, architecture governance, technology innovation, and alignment with business objectives while ensuring solutions are secure, scalable, resilient, supportable, and operationally appropriate. It provides strategic technical leadership, develops architecture and lifecycle strategies, evaluates emerging technologies, and collaborates with engineering, security, infrastructure, application, vendor, and business teams.

Requirements

Bachelor’s degree in computer science, Information Systems, Engineering, or a related field.
10 or more years of Information Technology experience.
5 or more years of technical leadership, enterprise solution design, architecture planning, or strategic technology planning experience.
Expert-level design and administration of Microsoft Configuration Manager (MECM) and Microsoft Intune in large enterprise environments, including ConfigMgr and Intune co-management, application and OS deployment, and client health.
Deep knowledge of Windows 10/11 servicing and patching, including update ring strategy, Windows Update for Business or Autopatch, and patch compliance reporting.
Strong knowledge of Active Directory, Group Policy, Microsoft Entra ID, and Windows Server infrastructure as they relate to endpoint management.
Strong understanding of endpoint security and vulnerability remediation, including security baselines, BitLocker, privileged access and least-privilege controls, certificate management, and zero-trust principles.
Advanced PowerShell scripting and automation, including APIs, WMI, and orchestration platforms, to automate deployment, remediation, configuration, and reporting.
Experience developing architecture roadmaps, reference architecture, design standards, and governance frameworks for enterprise endpoint platforms.
Demonstrated ability to lead design reviews and make risk-based architecture recommendations on high-visibility initiatives.
Ability to travel as needed.

Nice To Haves

Advanced degree.
Experience with Digital Employee Experience (DEX) and endpoint analytics platforms such as Nexthink, plus automation and self-healing capabilities.
Experience with Windows Autopilot, Microsoft Connected Cache, and Delivery Optimization to manage content delivery and network impact.
Experience building endpoint health and compliance reporting with SQL Server and Power BI.

Responsibilities

Develop, govern, and maintain strategic architecture roadmaps for Windows endpoint management (MECM and Intune), patching and servicing, digital employee experience, software delivery, automation, vulnerability management, and workplace security platforms.
Create and govern reference architectures, design standards, and reusable solution frameworks.
Lead architecture reviews and solution design approvals for major projects affecting Digital Workplace Technologies.
Ensure solutions comply with enterprise architecture standards, cybersecurity requirements, operational support models, resiliency expectations, and lifecycle governance practices.
Identify, assess, and manage technical debt, platform rationalization opportunities, modernization initiatives, architectural risks, and strategic investment needs.
Lead modernization initiatives involving cloud-first endpoint management, including ConfigMgr and Intune co-management, AI-enabled operations, workforce analytics, predictive remediation, automation, and self-healing capabilities.
Evaluate emerging technologies and develop strategic recommendations that support business objectives, operational excellence, security improvement, employee productivity, and user experience.
Lead proof-of-concept activities, technology assessments, vendor evaluations, architecture comparisons, adoption strategies, and implementation recommendations.
Provide technical leadership and mentorship to engineers, analysts, and project teams; collaborate with Enterprise Architecture, Cybersecurity, Infrastructure, Application, vendor, and business teams.
Establish platform health indicators and metrics to measure reliability, security, performance, lifecycle readiness, and employee experience outcomes.
Develop capacity, performance, resiliency, and lifecycle strategies for workplace technology platforms.