Windows & Endpoint Management Architect

Job description

JOB SUMMARY

This position is responsible for defining future-state architecture, technology standards, governance practices, and strategic roadmaps for Digital Workplace Technologies team. This role provides technical leadership for the Windows endpoint environment, including Microsoft Configuration Manager (MECM), Microsoft Intune, and Windows servicing and patching, as well as digital employee experience, device lifecycle management, software delivery, automation, vulnerability management, workplace security technologies, and enterprise workplace modernization.

The role serves as a strategic technical leader, driving modernization efforts, architecture governance, technology innovation, and alignment while ensuring solutions remain secure, scalable, resilient, supportable, and aligned with Southern Company business objectives. The architect level will depend on the candidate’s skills, experience, and demonstrated ability to perform the responsibilities of the role. This position requires onsite work three (3) days per week at either our Atlanta, GA, or Birmingham, AL location.

JOB REQUIREMENTS

(Education, Experience, Knowledge, Skills )

Technical Skills

Required Expert-level design and administration of Microsoft Configuration Manager (MECM) and Microsoft Intune in large enterprise environments, including ConfigMgr and Intune co-management, application and OS deployment, and client health. Deep knowledge of Windows 10/11 servicing and patching, including update ring strategy, Windows Update for Business or Autopatch, and patch compliance reporting. Strong knowledge of Active Directory, Group Policy, Microsoft Entra ID, and Windows Server infrastructure as they relate to endpoint management.

Strong understanding of endpoint security and vulnerability remediation, including security baselines, BitLocker, privileged access and least-privilege controls, certificate management, and zero-trust principles. Advanced PowerShell scripting and automation, including APIs, WMI, and orchestration platforms, to automate deployment, remediation, configuration, and reporting. Experience developing architecture roadmaps, reference architecture, design standards, and governance frameworks for enterprise endpoint platforms.

Demonstrated ability to lead design reviews and make risk-based architecture recommendations on high-visibility initiatives.

Preferred Experience with Digital Employee Experience (DEX) and endpoint analytics platforms, such as Nexthink, plus automation and self-healing capabilities. Experience with Windows Autopilot, Microsoft Connected Cache, and Delivery Optimization to manage content delivery and network impact. Experience building endpoint health and compliance reporting with SQL Server and Power BI.

Education and Experience

Requirements Bachelor’s degree in computer science, Information Systems, Engineering, or related field required. Advanced degree preferred. 10+ years of Information Technology experience, including 5+ years of technical leadership, enterprise solution design, architecture planning, or strategic technology planning experience. Travel as needed.

MAJOR JOB RESPONSIBILITIES

Develops, governs, and maintains strategic architecture roadmaps for Windows endpoint management (MECM and Intune), patching and servicing, digital employee experience, software delivery, automation, vulnerability management, and workplace security platforms. Creates and governs reference architectures, design standards, and reusable solution frameworks. Leads architecture reviews and solution design approvals for major projects impacting Digital Workplace Technologies.

Ensures solutions comply with enterprise architecture standards, cybersecurity requirements, operational support models, resiliency expectations, and lifecycle governance practices. Identifies, assesses, and manages technical debt, platform rationalization opportunities, modernization initiatives, architectural risks, and strategic investment needs. Leads modernization initiatives involving cloud-first endpoint management (including ConfigMgr and Intune co-management), AI-enabled operations, workforce analytics, predictive remediation, automation, and self-healing capabilities.

Evaluates emerging technologies and develops strategic recommendations supporting business objectives, operational excellence, security improvement, employee productivity, and user experience. Leads proof-of-concept activities, technology assessments, vendor evaluations, architecture comparisons, adoption strategies, and implementation recommendations. Provides technical leadership and mentorship to engineers, analysts, and project teams, and collaborates with Enterprise Architecture, Cybersecurity, Infrastructure, Application, vendor, and business teams.

Establishes platform health indicators and metrics to measure reliability, security, performance, lifecycle readiness, and employee experience outcomes. Develops capacity, performance, resiliency, and lifecycle strategies for workplace technology platforms.