Azure Endpoint Architect

About NFF

Since 1996, NFF has designed, architected, and delivered IT network and security solutions to many state, and local government agencies, K-20 educational institutions, federal agencies, and large enterprise businesses across the mid-Atlantic. NFF is a technology services and solutions provider, specializing in next-generation IT infrastructure including networks, data centers, cloud migrations, IT security, collaboration and mobility, and full/part-time staff augmentation services.   Our solutions, professional services and IT staffing portfolio are centered around building more resilient, secure, adaptive, and intelligent IT infrastructure and include comprehensive assessment, architecture, design, integration and installation services, and ongoing performance management services though our Network Operations Center (NOC).  

NFF is a Cisco Gold Partner with a Customer Experience Specialization and was a “Cisco Top-5 Mid-Atlantic SLED Partner” in 2019, 2020 and 2022. NFF has maintained Cisco Gold Partnership since 2008, is the only Cisco Gold Partner headquartered in the District of Columbia. In addition to Cisco, NFF has key partnerships with many manufacturers and IT solution providers including, Rapid7, Arctic Wolf, VMware, NetApp and Splunk.

NFF is a District of Columbia (DC) Certified Business Enterprise (CBE) and a SBA Certified Small Business with headquarters in downtown Washington, DC. Our dedication to quality is reflected in our accomplishment of being awarded multiple ISO 9001:2015 certifications.

About this Position / Responsibilities

NFF, Inc. is seeking an experienced Endpoint Architect to design, implement, and optimize enterprise endpoint management solutions. This role involves leading the strategic direction of device management, security, automation, and endpoint lifecycle management across Windows, macOS, iOS, and Android environments. The ideal candidate will have deep expertise in Microsoft Endpoint Manager (Intune), SCCM, Azure AD, Zero Trust security, and automation frameworks.

Endpoint Architecture & Strategy

• Define and implement enterprise-wide endpoint management strategies aligned with business and security objectives.
• Design and optimize Microsoft Endpoint Manager (Intune), SCCM, Windows Autopilot, and cloud-based endpoint solutions.
• Establish Zero Trust security frameworks for endpoint protection and compliance.
• Develop roadmaps, standards, and governance models for endpoint lifecycle management.
• Architect and enforce security policies, including Conditional Access, BitLocker, Defender for Endpoint, and Privileged Access Management.
• Ensure compliance with NIST, CIS, ISO 27001, and other industry security standards.
• Collaborate with InfoSec teams to enhance threat protection and risk mitigation strategies.

Qualifications

• Required 10+ years’ experience in endpoint architecture, device management, and security.
• Required 10+ years’ expertise in Microsoft Endpoint Manager (Intune), SCCM, Azure AD, Windows Autopilot, and Modern Workplace solutions.
• Required 10+ years’ experience with a deep knowledge of Windows, macOS, iOS, and Android endpoint security.
• Required a strong understanding of Zero Trust, Conditional Access, and compliance frameworks.
• Required a strong experience with automation (PowerShell, Graph API, Terraform, or Ansible).
• Required a strong Knowledge of Microsoft Defender for Endpoint, Sentinel, and SIEM/SOAR integrations.
• Microsoft certifications (MD-102, MS-500, AZ-104, or equivalent) preferred.

NFF Disclosures

NFF offers a competitive salary, comprehensive benefits and flexible paid time off options, for eligible employees:

• Medical, Dental and Vision, Health Savings Account, Flexible Spending Account
• STD, LTD, Supplemental life insurance and ADD&D
• Comprehensive 401k plan
• Paid Time Off

NFF is an Equal Opportunity Employer.

Important Notice: All NFF Inc communications come from @nffinc.com. Emails from other domains claiming to be NFF are likely scams. Be cautious, verify senders, and report suspicious messages immediately.