Lead Endpoint Engineering Architect
Iovancebiotherapeutics · Remote
About this role
**Lead Endpoint Engineering Architect** **About the Role** Own the architecture and build-out of Iovance's endpoint management platform covering ~1,000 Windows devices across corporate, lab, and field locations. Design a modern, reliable endpoint platform on Microsoft Intune, Autopilot, and Entra ID, then hand off operations to the support team with clear documentation. This is a hands-on technical role focused on engineering work. **Key Responsibilities** • Design and implement Intune/Autopilot end-to-end: enrollment, configuration profiles, compliance policies, Conditional Access, update rings • Build zero-touch Autopilot provisioning workflows for factory-sealed laptops • Create layered configuration profile structures with security baselines and role-specific policies • Design Win32 application deployment with proper dependency chains and detection rules • Build Proactive Remediations for common issues (network drives, configuration drift, app health) • Establish laptop performance baselines and remediation workflows • Implement compliance policies and Conditional Access with IT Security • Write architecture diagrams, runbooks, and troubleshooting guides • Train deskside and help desk staff on Intune operations • Manage SharePoint Online sites, Power Automate flows, and Microsoft Forms • Evaluate endpoint management tools and OEM driver solutions **Required Experience** • 8+ years enterprise IT; 4-5+ years deep in Intune, Autopilot, Entra ID, Conditional Access, Windows Update for Business • Architected and operated Intune environments managing 1,000+ devices • Production-level PowerShell automation skills • Real experience packaging Win32 applications for Intune • Entra ID dynamic groups and Conditional Access policy design • OEM driver management (Dell, Lenovo, HP) or Windows Update for Business drivers • Regulated industry experience (pharma, biotech, medical device, financial services) • Cross-functional collaboration and documentation skills **Preferred** • Microsoft Certified: Endpoint Administrator Associate (MD-102) • SCCM/MECM to Intune migration experience • M365 E3/E5 licensing knowledge • Bachelor's in Computer Science, IT, Engineering, or related field **Compensation** $195,000 – $210,000 USD **Work Environment** Remote-eligible professional office environment
Listing freshness
CronJobs last confirmed this listing 14h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.