Sr Staff Endpoint Architect

Position Overview We are seeking an experienced Sr. Staff Endpoint Architect to lead the strategy, architecture, modernization, and engineering of our global Apple and Windows endpoint platforms. This role will serve as a senior technical authority for macOS, Windows, iOS, and iPadOS. A key focus will be enabling the responsible expansion of Mac adoption by evaluating employee personas, business workflows, application compatibility, security requirements, support readiness, cost, and employee experience—not simply providing Macs to more users. The successful candidate will define the future-state endpoint architecture and build secure, scalable, automated, and employee-centered capabilities across the device lifecycle. This individual will partner with Security, Identity, Infrastructure, Networking, Application teams, Service Management, Procurement, and business functions to modernize the endpoint environment and deliver a consistent global employee experience. Key Responsibilities Endpoint Strategy and Architecture •    Define the enterprise endpoint strategy, reference architecture, and modernization roadmap across Apple and Windows platforms. •    Develop a persona-based device strategy that aligns endpoint selection with job responsibilities, business workflows, application requirements, security, mobility, and employee experience. •    Lead assessments of applications, workflows, peripherals, and technical dependencies to identify appropriate Mac and Windows use cases. •    Develop a data-driven roadmap for expanding Mac adoption across qualified employee personas and business functions. •    Establish standards for endpoint hardware, operating systems, identity, applications, security, compliance, connectivity, and lifecycle management. •    Evaluate emerging Apple, Microsoft, digital employee experience, automation, and AI capabilities for enterprise use. •    Present technical recommendations, investment priorities, risks, and progress to technology and business leadership. Apple and Windows Platform Engineering •    Architect and modernize Apple device management using Jamf Pro, Microsoft Intune, Apple Business Manager, Automated Device Enrollment, and modern Apple management frameworks. •    Architect Windows management using Microsoft Intune, Windows Autopilot, Microsoft Configuration Manager, Entra ID, and related cloud-management technologies. •    Design secure zero-touch provisioning, application delivery, configuration, compliance, recovery, replacement, and decommissioning experiences for both platforms. •    Define the appropriate use of Jamf, Intune, Configuration Manager, co-management, and cloud-native management within the endpoint ecosystem. •    Establish operating-system testing, patching, upgrade, enforcement, exception, and vulnerability-response strategies. •    Architect identity capabilities using Entra ID, Platform SSO, Windows Hello for Business, Conditional Access, passwordless authentication, and certificates. •    Define endpoint security standards covering FileVault, BitLocker, privileged access, endpoint protection, data protection, recovery keys, local accounts, and device compliance. •    Engineer scalable application packaging, deployment, updating, and retirement for macOS and Windows applications. •    Provide senior technical leadership for complex endpoint, identity, security, application, and management-platform issues. Application Readiness and Device Adoption •    Establish a device eligibility framework that identifies the appropriate endpoint platform for each employee persona and business use case. •    Maintain cross-platform application catalogs identifying supported, conditional, incompatible, and remediation-required applications. •    Partner with appli