Endpoint Architecture Engineer

The Endpoint Architecture Engineer is responsible for defining, designing, and governing the global endpoint management architecture across Windows, macOS, iOS platforms. This role drives the strategic evolution of modern workplace technologies, ensuring secure, scalable, and user-centric endpoint services aligned with enterprise business objectives.

The Endpoint Architecture Engineer acts as the technical authority for endpoint management, identity integration, device security, lifecycle management, automation, and modern workplace transformations while partnering closely with Cybersecurity, Infrastructure, Service Management, and Digital Workplace teams, Endpoint Architecture & Strategy

• Define and maintain the global endpoint architecture roadmap
• Design scalable Endpoint Management solutions using Microsoft Intune, Entra ID, Autopilot, Jamf Pro, and associated technologies.
• Lead the transition from legacy endpoint management solutions toward cloud-native architectures
• Establish endpoint standards, governance models, and design principles
• Evaluate emerging technologies and provide strategic recommendations

Modern Workplace Transformation

• Design and implement Modern Device Management strategies
• Develop architectures supporting native Entra ID joined devices
• Lead large-scale endpoint migration initiatives
• Drive endpoint automation, self-service, and zero-touch provisioning capabilities.
• Support workplace modernization programs and digital employee experience initiatives

Security & Compliance

• Design endpoint security baselines and hardening standards
• Partner with Cybersecurity teams to implement Zero Trust principles
• Define compliance policies, conditional access strategies, and device governance controls
• Ensure alignment with regulatory, privacy, and corporate security requirement
• Review architectural impacts of endpoint-related security initiatives

Platform Ownership

• Govern Microsoft Intune, SCCM, Jamf Pro, Apple Business Manager, and related management platforms
• Define architectural patterns for: Device enrollment Software distribution Patch management Endpoint security Device lifecycle management Remote support Configuration management
• Ensure platform scalability, resilience, and operational excellence

Automation & Integration

• Design integrations with: ServiceNow Microsoft Graph Microsoft 365 Identity Management platforms Security platforms
• Develop automation standards utilizing PowerShell, Graph API, and modern cloud technologies
• Drive reduction of operational overhead through automated workflows

Technical Leadership

• Serve as highest-level technical escalation point for endpoint architecture topics
• Mentor Endpoint Engineers and Platform Administrators
• Lead architecture reviews and technical design sessions
• Provide guidance to project teams and leadership
• Contribute to global technology governance boards

• Bachelor’s degree in Computer Science, Information Systems, or Engineering
• 8+ years of experience in Endpoint Management, Workplace Engineering, or Infrastructure Architecture
• 5+ years of experience with: Microsoft Intune Microsoft Entra ID Microsoft Autopilot Windows 11 Enterprise, * Microsoft Certified: Endpoint Administrator Associate Enterprise Administrator Expert Cybersecurity Architect Expert
• JAMF and ITIL certifications
• Experience with: DEX platforms (Nexthink, Lakeside) Conditional Access Privileged Access Management Endpoint Detection & Response Azure Automation Microsoft Graph API
• Strong experience with: Jamf Pro Apple Business Manager macOS enterprise management
• Advanced understanding of: Endpoint security Device compliance Identity and access management Zero Trust Architecture
• Experience designing enterprise-scale endpoint solutions for global organizations

The annual salary for this position is between $96,000.00 - $192,000.00 annually. Factors which may affect pay within this range include, but are not limited to, skills, education, experience, and other unique qualifications of the successful candidate. The pay range will not be below the minimum wage applicable to the jurisdiction in which the applicant is to be employed., Employees are eligible for benefits, including:

• Health Care Benefits: Medical, Dental, Vision; Wellness incentives
• Retirement Benefits
• Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation
• Disability: Short-term and long-term disability
• Life Insurance and Accidental Death and Dismemberment
• Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account
• Tuition Assistance

Carrier Global Corporation, global leader in intelligent climate and energy solutions, is committed to creating innovations that bring comfort, safety and sustainability to life. Through cutting-edge advancements in climate solutions such as temperature control, air quality and transportation, we improve lives, empower critical industries and ensure safe transport of food, lifesaving medicines and more. Since inventing modern air conditioning in 1902, we lead with purpose: enhancing the lives we live and the world we share. We continue to lead because of our world-class, inclusive workforce that puts the customer at the center of everything we do. For more information, visit corporate.carrier.com or follow on Carrier social media at @Carrier.