DIGITAL SECURITY - Threat Prevention - ENDPOINT SECURITY

Job Description: - Endpoint& Desktop Engineering Architect 

The Microsoft Endpoint Management Solution Architect role plays a crucial role in helping True Tandem's customers with designing, developing, and deploying End point solutions and Rollout and packaging solutions. They need expert-level experience and knowledge of Endpoint Management architecture, administration, and best practice recommendations, as well as extensive experience with Microsoft SCCM/MECM/Intune Autopilot. The architect is responsible for infrastructure design and setup with Intune, including device management, maintaining the Intune/Autopilot environment, OSD creation/maintenance, application packaging/deployment, Windows patching, and hardware specifications. Additionally, they administer, integrate, and co-manage (Intune-SCCM/MECM).

Key Functional Areas of Expertise

• Architects and consulting roles in the projects,
• Design and implementation, hands-on experience
• Technical specialization / External certifications
• Build the vital competency centres.
• Excellent quality of delivery
• Build a portfolio of successful projects, references, and credentials.
• Market research

Technical Expertise

• I have 8 to 10 or more years of experience in Architecture and Design solutions, Migration and Consolidation, and rollout of end-user device rollouts like Win 10/11 and MDM environments. 
• Experience working in a Transitional multi-supplier environment within a large-scale organization. Experience in leading significant technical solution design and development, leveraging existing tool suites, and proposing best-of-breed solutions.
• Device Management – JAMF and Intune MDM
• Setup of Policies
• M365 Security Products (Microsoft Defender ATP, MDAV, Azure RMS)
• Microsoft Windows 10 Security and Management (Bit locker, MBAM, Device Guard, Credential Guard)
• Windows 10 driver, power utility
• Distribution points – Capacity constraints in distribution points
• AD/GPO/Azure Cloud integration
• Maintaining and managing SCCM servers, setting up Distribution points – Capacity constraints in distribution points
• Work along with 3rd party vendors to troubleshoot core applications and patch deployment issues.
• In-depth expertise in Autopilot, Co-management, Conditional Access, device policies, MAM for IOS and Android), in-depth understanding of Azure Active Directory and Office 365, Security (LAPS, Bit locker, Windows Hello for Business, Certificate 802.1X)
• Good experience in Microsoft Cloud/Hybrid Cloud Management. Onboarding and configuring and transitioning to the cloud.
• Exposure to Integration and Network security
• Understanding of LAN, WAN & voice network environments, routing protocols, and various technology architectures, including TCP/IP, DHCP, DNS, LAN, WAN, Wireless, VPN
• Extensive hands-on support experience in supporting Windows 10 and the O365 Office suite of programs.
• Experience in Setting up SCCM 2016 Servers, Distribution Servers, and Site Servers
• Experience with WSUS and Patch Management using SCCM.
• Strong working experience with GPOs – Ability to work on Package Distribution, Patch management and release management troubleshooting.
• Experience in handling, configuring and distributing PAC files.

In-depth knowledge of scripting languages such as PowerShell, Active Directory group policy, Orchest