End User Compute Architect

Role Summary

Designs the end user compute and Microsoft 365 architecture for a carve-out, covering devices, mailboxes, endpoint security and certificates. Owns the target-state design and the technical approach for moving users and devices between tenants.

Job Responsibilities

Design the target Microsoft 365 and Exchange Online architecture Design cross-tenant synchronisation and cross-tenant trust Design mailbox, shared mailbox and user management approaches Define Intune policies, Autopilot profiles and device wipe and re-enrolment designs Design device moves between tenants, including compliance and configuration baselines Define XDR and EDR solution architecture and endpoint protection policies Design patching and software deployment for managed endpoints Design ZTNA and VPN client deployment and management Design PKI, certificate authority delegation and device certificate issuance Define preventive controls including application locking and MFA enforcement Produce high-level and low-level designs and review them with client architects Required Experience 10+ years of relevant experience in end user compute architecture Strong experience with Microsoft 365 and Exchange Online Strong experience with Microsoft Intune policies and Windows Autopilot Experience with device wipe, re-enrolment and tenant-to-tenant device moves Experience with cross-tenant sync, cross-tenant trust and shared mailboxes Experience with mailbox migration and user management Experience with XDR and EDR solutions, such as Microsoft Defender and Crowd.

Strike Experience with patching tools and endpoint software management Experience with ZTNA and VPN client deployment, at least two vendors Good understanding of PKI: certificate authorities, templates, delegation and device certificates Experience with preventive controls such as application locking Experience with MFA design and enforcement Working knowledge of Entra ID and hybrid identity as it affects endpoints Experience with at least two cloud providers (Azure and AWS) Exposure to at least two OEMs or two vendors in each technology area Strong communication skills, with prior experience working with UK and EU clients Willingness to travel as required and to work in the client time zone Prior infrastructure background alongside the specialism above Prior experience in IT consolidations, mergers, demergers and carve-outs (mandatory) Relevant professional certifications strongly recommended