Netrix Global · United States - Remote (within location), US · 3 months ago
Netrix Global is seeking a Cloud Endpoint Solutions Architect that is responsible for designing, implementing, and optimizing modern endpoint and virtual desktop solutions that improve security, user experience, and operational efficiency. This role primarily focuses on Microsoft Intune Modern Management, Windows 365 Cloud PCs, and Azure Virtual Desktop (AVD), enabling organizations to transition from legacy endpoint management approaches to cloud-native, Zero Trust-aligned device and application delivery models.
In this position, you will serve as a technical leader and trusted advisor, guiding customers and internal stakeholders through strategy, architecture, and implementation. You will translate business needs into scalable, supportable solutions—covering identity, device compliance, configuration, application delivery, security baselines, monitoring, and lifecycle operations. You will collaborate with security, networking, EUC, and infrastructure teams to ensure end-to-end success, and you will produce high-quality architecture documentation, implementation runbooks, and governance standards suitable for enterprise environments.
The ideal candidate brings deep experience with Intune and Microsoft Endpoint Manager capabilities, strong hands-on implementation skills, and the ability to design and operate Windows 365 and AVD at scale. You will be comfortable leading workshops, performing current-state assessments, creating target-state architectures, and executing deployments while mentoring engineers and influencing technical direction.
Design and implement device enrollment and provisioning (Windows Autopilot, Entra ID join/hybrid join)
Build configuration baselines using configuration profiles, settings catalog, security baselines, and administrative templates
Implement compliance policies, Conditional Access integration, and Zero Trust endpoint posture strategies
Design application delivery models (Win32 apps, Microsoft Store apps, M365 Apps deployment, app dependencies, detection rules)
Establish update strategies (Windows Update for Business, feature update rings, quality update policies, driver management approaches)
Operationalize monitoring and remediation (Endpoint analytics, reporting, proactive remediations / scripting, troubleshooting workflows)
Architect Windows 365 solutions (Business/Enterprise/Frontline as applicable) aligned to personas and performance requirements
Define provisioning policies, image strategy, security controls, and network connectivity patterns
Design operational processes for Cloud PC lifecycle (assignment, resizing, reprovisioning, troubleshooting, support model)
Architect AVD host pools and workload designs (pooled vs personal, multi-session vs single-session)
Design FSLogix profile solutions, image management strategy, scaling/automation approach, and resiliency patterns
Align AVD identity, access controls, and network/security requirements with enterprise standards
Provide guidance on operational excellence (monitoring, capacity planning, cost optimization, performance tuning)
Security & Compliance
Implement endpoint security controls in collaboration with security teams (Defender integration, attack surface reduction, device compliance posture)
Ensure architectures align to regulatory and organizational requirements (data protection, logging, access control, segmentation)
Lead discovery workshops, assessments, and solution envisioning sessions
Create high-quality deliverables: architecture diagrams, implementation plans, migration runbooks, test plans, and support handoffs
Mentor engineers and contribute to technical standards, reusable templates, and automation patterns
Coordinate with stakeholders across identity, networking, security, and service management teams
5+ years in endpoint management, EUC, or cloud infrastructure roles with increasing architecture responsibility
Experience with FSLogix, profile/container strategies, and AVD performance optimization
Familiarity with Microsoft Defender for Endpoint, security baselines, and endpoint hardening best practices
Experience migrating from SCCM/MECM, GPO-heavy environments, or legacy VDI (Citrix/VMware) to modern management or AVD/Windows 365
Scripting/automation skills (PowerShell strongly preferred; Azure Automation/Functions a plus)
Experience with monitoring/operations tooling (Log Analytics, Azure Monitor, AVD Insights, endpoint analytics)
Understanding of networking concepts relevant to AVD/Windows 365 (name resolution, routing, VPN/ExpressRoute, segmentation, identity-aware access)
MD-102, MS-102, AZ-104, AZ-140, SC-300 (or equivalent real-world experience)
At Netrix Global our values are the philosophies and principles that we live by. They support our vision, help us achieve our goals and commit us to a common purpose.
We Own Outcomes, Win Together, Make An Impact, Enjoy The Journey, and Respect All!
Netrix Global is a mission-driven organization with the goal of providing the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. Our breadth of capabilities allows us to provide holistic offerings that solve even today’s most complex business challenges, delivering to you an integrated, optimized, and future-proof solution.
We work with clients of all sizes and specialize in solutions for healthcare, manufacturing, government, education, financial services, and legal industries. Netrix is consistently ranked in the CRN VAR500, detailing the country’s top system integrators.
At Netrix, we’re driven to solve business problems with innovative technology solutions. We focus on end-users and are committed to client satisfaction.
We offer a competitive compensation package, comprehensive group benefits to meet the needs of you and your family, flexibility, and time off when you need it, and a casual work environment. The role can be remote/home office, with some travel required.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations. If you need reasonable accommodations, please let us know by contacting NetrixHR@Netrixglobal.
To learn more about Netrix Global please go to www.netrixglobal.com
Headquarters
United States - Remote (within location)
Work Location
remote
Job Category
IT - Network/Sys/DB Admin
Application Deadline
Not specified
Job Type
full-time
Experience Level
senior-level
Application Method
Apply via Website
Salary
Not specified
No related jobs found