Endpoint Windows Architect

Job description

Perform engineering services to support existing Authorized User solutions and develop new solutions within the Project infrastructure, including macOS devices, operating systems, application packages, support processes, selfservice Mac solutions, and BYOD solutions. Design, build, and maintain all Authorized User solution software images and configuration profiles in compliance with Project standards and requirements. Ensure all engineering services adhere to Project security, compliance, and governance policies, including patching, vulnerability management, and lifecycle standards. Deliver technical execution of macOS endpoint services, including imaging, patching, software deployment, and device compliance across all supported hardware platforms. Own and maintain the macOS enrollment and provisioning process using Jamf and Apple Business Manager, ensuring consistent deployment and compatibility across approved device models. Administer and optimize Jamf Pro, Intune MDM connectors, and Apple Business Manager for provisioning, compliance, and lifecycle management. Provide Tier 4 support for advanced troubleshooting and resolution of complex macOS endpoint issues, including OSlevel failures and deployment errors. Design, implement, and execute patching and vulnerability remediation strategies to maintain endpoint security and compliance with Project standards. Support hardware evaluation and selection by testing compatibility, performance, and integration of new Mac device models with Projects endpoint standards. Develop automation scripts and workflows (e.g., Bash, Python) to improve endpoint deployment, compliance, and user experience, and contribute to the engineering backlog for ongoing enhancements. Partner with product and client experience teams to resolve issues, improve service quality, and ensure alignment with Projects technology roadmap and strategic priorities. Maintain engineering expertise and oversight in Jamf Pro administration, Apple Business Manager, Intune integration, configuration profiles, scripting (Bash/Python), and reporting (SQL/PowerBI). Manage secure enrollment and lifecycle of iOS and Android devices through Jamf and Intune MDM. Create and maintain configuration profiles, scripts, and automations for macOS, iOS, and Android platforms.