End User Compute Architect

Role Summary

Designs the end user compute and Microsoft 365 architecture for a carve-out, covering devices, mailboxes, endpoint security and certificates. Owns the target-state design and the technical approach for moving users and devices between tenants.

Job Responsibilities

• Design the target Microsoft 365 and Exchange Online architecture
  

• Design cross-tenant synchronisation and cross-tenant trust
  

• Design mailbox, shared mailbox and user management approaches
  

• Define Intune policies, Autopilot profiles and device wipe and re-enrolment designs
  

• Design device moves between tenants, including compliance and configuration baselines
  

• Define XDR and EDR solution architecture and endpoint protection policies
  

• Design patching and software deployment for managed endpoints
  

• Design ZTNA and VPN client deployment and management
  

• Design PKI, certificate authority delegation and device certificate issuance
  

• Define preventive controls including application locking and MFA enforcement
  

• Produce high-level and low-level designs and review them with client architects
  

Required Experience

• 10+ years of relevant experience in end user compute architecture
  

• Strong experience with Microsoft 365 and Exchange Online
  

• Strong experience with Microsoft Intune policies and Windows Autopilot
  

• Experience with device wipe, re-enrolment and tenant-to-tenant device moves
  

• Experience with cross-tenant sync, cross-tenant trust and shared mailboxes
  

• Experience with mailbox migration and user management
  

• Experience with XDR and EDR solutions, such as Microsoft Defender and CrowdStrike
  

• Experience with patching tools and endpoint software management
  

• Experience with ZTNA and VPN client deployment, at least two vendors
  

• Good understanding of PKI: certificate authorities, templates, delegation and device certificates
  

• Experience with preventive controls such as application locking
  

• Experience with MFA design and enforcement
  

• Working knowledge of Entra ID and hybrid identity as it affects endpoints
  

• Experience with at least two cloud providers (Azure and AWS)
  

• Exposure to at least two OEMs or two vendors in each technology area
  

• Strong communication skills, with prior experience working with UK and EU clients
  

• Willingness to travel as required and to work in the client time zone
  

• Prior infrastructure background alongside the specialism above
  

• Prior experience in IT consolidations, mergers, demergers and carve-outs (mandatory)
  

• Relevant professional certifications strongly recommended