Windows & Endpoint Management Architect

Southern Company • Birmingham, AL

2d • Hybrid

About The Position

This position defines future-state architecture, technology standards, governance practices, and strategic roadmaps for the Digital Workplace Technologies team. It provides technical leadership for the Windows endpoint environment, including Microsoft Configuration Manager (MECM), Microsoft Intune, Windows servicing and patching, digital employee experience, device lifecycle management, software delivery, automation, vulnerability management, workplace security technologies, and enterprise workplace modernization.

The role drives modernization, architecture governance, and technology innovation, aligning solutions with Southern Company business objectives while ensuring they are secure, scalable, resilient, and supportable. The architect level depends on the candidate’s skills, experience, and demonstrated ability to perform the responsibilities. The position requires onsite work three days per week at either the Atlanta, Georgia, or Birmingham, Alabama location, with travel as needed.

Requirements

• Expert-level design and administration of Microsoft Configuration Manager (MECM) and Microsoft Intune in large enterprise environments, including ConfigMgr and Intune co-management, application and OS deployment, and client health.
• Deep knowledge of Windows 10/11 servicing and patching, including update ring strategy, Windows Update for Business or Autopatch, and patch compliance reporting.
• Strong knowledge of Active Directory, Group Policy, Microsoft Entra ID, and Windows Server infrastructure as they relate to endpoint management.
• Strong understanding of endpoint security and vulnerability remediation, including security baselines, BitLocker, privileged access and least-privilege controls, certificate management, and zero-trust principles.
• Advanced PowerShell scripting and automation, including APIs, WMI, and orchestration platforms, to automate deployment, remediation, configuration, and reporting.
• Experience developing architecture roadmaps, reference architecture, design standards, and governance frameworks for enterprise endpoint platforms.
• Demonstrated ability to lead design reviews and make risk-based architecture recommendations on high-visibility initiatives.
• Bachelor’s degree in computer science, Information Systems, Engineering, or a related field.
• 10+ years of Information Technology experience, including 5+ years of technical leadership, enterprise solution design, architecture planning, or strategic technology planning experience.
• Travel as needed.

Nice To Haves

• Advanced degree.
• Experience with Digital Employee Experience (DEX) and endpoint analytics platforms, such as Nexthink, plus automation and self-healing capabilities.
• Experience with Windows Autopilot, Microsoft Connected Cache, and Delivery Optimization to manage content delivery and network impact.
• Experience building endpoint health and compliance reporting with SQL Server and Power BI.

Responsibilities

• Develop, govern, and maintain strategic architecture roadmaps for Windows endpoint management (MECM and Intune), patching and servicing, digital employee experience, software delivery, automation, vulnerability management, and workplace security platforms.
• Create and govern reference architectures, design standards, and reusable solution frameworks.
• Lead architecture reviews and solution design approvals for major projects impacting Digital Workplace Technologies.
• Ensure solutions comply with enterprise architecture standards, cybersecurity requirements, operational support models, resiliency expectations, and lifecycle governance practices.
• Identify, assess, and manage technical debt, platform rationalization opportunities, modernization initiatives, architectural risks, and strategic investment needs.
• Lead modernization initiatives involving cloud-first endpoint management, including ConfigMgr and Intune co-management, AI-enabled operations, workforce analytics, predictive remediation, automation, and self-healing capabilities.
• Evaluate emerging technologies and develop strategic recommendations supporting business objectives, operational excellence, security improvement, employee productivity, and user experience.
• Lead proof-of-concept activities, technology assessments, vendor evaluations, architecture comparisons, adoption strategies, and implementation recommendations.
• Provide technical leadership and mentorship to engineers, analysts, and project teams, collaborating with Enterprise Architecture, Cybersecurity, Infrastructure, Application, vendor, and business teams.
• Establish platform health indicators and metrics to measure reliability, security, performance, lifecycle readiness, and employee experience outcomes.
• Develop capacity, performance, resiliency, and lifecycle strategies for workplace technology platforms.

Benefits

• Competitive base salary.
• Annual incentive awards for eligible employees.
• Health, welfare, and retirement benefits designed to support physical, financial, and emotional/social well-being.
• The position may be eligible for additional compensation, such as an incentive program, subject to applicable plan terms and conditions.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior