> Markdown version of [/jobs/ext/3088559-sr-staff-endpoint-architect](https://www.wearedevelopers.com/jobs/ext/3088559-sr-staff-endpoint-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Staff Endpoint Architect

- **Company:** Western Digital Corporation
- **Location:** Irvine, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $145,100.0 - $193,500.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Proxy Servers, IOS Applications, Macintosh Computers, Apple Mac Systems, Microsoft Azure, Bash Shell, BitLocker Drive Encryption, Microsoft Online Services, Software as a Service, Configuration Management, Software Documentation, Collaborative Software, Domain Name System (DNS), Virtual Private Networks (VPN), Python (Programming Language), Virtual Desktops, Windows PowerShell, Release Management, Zero Trust Network Access, Software Deployment, System Testing, Wi-Fi Technology, Peripherals, Microsoft InTune, Azure Security Center, Kubernetes, Deployment Automation, Data Analytics, Casper Suite, Restful APIs, Software Version Control
- **Published:** September 26, 2026
- **Apply:** https://jobs.smartrecruiters.com/WesternDigital/744000151898039-sr-staff-endpoint-architect

## About the Role

* 10+ years of experience in endpoint engineering, workplace technology, enterprise infrastructure, or related discipline.
 * Extensive experience architecting and supporting Apple and Windows endpoints in a large, complex, or global enterprise.
 * Demonstrated experience leading an endpoint modernization, Mac adoption, cloud-management, or device-transformation initiative.
 * Deep expertise with Jamf Pro and strong experience with Microsoft Intune, Windows Autopilot, and Microsoft Configuration Manager.
 * Hands-on experience with Apple Business Manager, Automated Device Enrollment, and Apple application management.
 * Advanced knowledge of macOS and Windows architecture, security, configuration, deployment, and troubleshooting.
 * Strong experience with Entra ID, Platform SSO, Windows Hello for Business, Conditional Access, certificates, and passwordless authentication.
 * Advanced automation skills using PowerShell and at least one of the following: Bash, Zsh, Python, Microsoft Graph, Jamf APIs, or REST APIs.
 * Experience implementing enterprise security baselines, encryption, endpoint protection, privileged-access controls, and compliance policies.
 * Experience assessing employee personas, business workflows, application compatibility, and device requirements.
 * Strong knowledge of enterprise networking, including Wi-Fi, VPN, DNS, proxies, certificates, and Zero Trust.
 * Ability to translate business requirements into architecture, roadmaps, execution plans, and measurable outcomes.
 * Strong communication, documentation, stakeholder management, and technical leadership skills.
 * Experience developing device standards, total-cost-of-ownership models, technical pilots, migration programs, and employee enablement.
 * Familiarity with AI-assisted endpoint operations and self-healing capabilities., * Jamf 300 or Jamf 400 certification.
 * Relevant Microsoft, Apple, security, automation, or enterprise architecture certifications.
 * Experience with Jamf Connect, Jamf Protect, Microsoft Defender for Endpoint, or comparable technologies.
 * Experience with declarative device management, Platform SSO, Windows Autopatch, Windows 365, or Azure Virtual Desktop.
 * Familiarity with AutoPkg, Installomator, PSAppDeployToolkit, or similar tools.
 * Experience with digital employee experience platforms, endpoint telemetry, and proactive remediation.
 * Knowledge of CIS, NIST, ISO 27001, SOC 2, or comparable compliance frameworks.

## Description

We are seeking an experienced Sr. Staff Endpoint Architect to lead the strategy, architecture, modernization, and engineering of our global Apple and Windows endpoint platforms.
This role will serve as a senior technical authority for macOS, Windows, iOS, and iPadOS. A key focus will be enabling the responsible expansion of Mac adoption by evaluating employee personas, business workflows, application compatibility, security requirements, support readiness, cost, and employee experience-not simply providing Macs to more users.
The successful candidate will define the future-state endpoint architecture and build secure, scalable, automated, and employee-centered capabilities across the device lifecycle. This individual will partner with Security, Identity, Infrastructure, Networking, Application teams, Service Management, Procurement, and business functions to modernize the endpoint environment and deliver a consistent global employee experience., Endpoint Strategy and Architecture

 * Define the enterprise endpoint strategy, reference architecture, and modernization roadmap across Apple and Windows platforms.
 * Develop a persona-based device strategy that aligns endpoint selection with job responsibilities, business workflows, application requirements, security, mobility, and employee experience.
 * Lead assessments of applications, workflows, peripherals, and technical dependencies to identify appropriate Mac and Windows use cases.
 * Develop a data-driven roadmap for expanding Mac adoption across qualified employee personas and business functions.
 * Establish standards for endpoint hardware, operating systems, identity, applications, security, compliance, connectivity, and lifecycle management.
 * Evaluate emerging Apple, Microsoft, digital employee experience, automation, and AI capabilities for enterprise use.
 * Present technical recommendations, investment priorities, risks, and progress to technology and business leadership.
Apple and Windows Platform Engineering

 * Architect and modernize Apple device management using Jamf Pro, Microsoft Intune, Apple Business Manager, Automated Device Enrollment, and modern Apple management frameworks.
 * Architect Windows management using Microsoft Intune, Windows Autopilot, Microsoft Configuration Manager, Entra ID, and related cloud-management technologies.
 * Design secure zero-touch provisioning, application delivery, configuration, compliance, recovery, replacement, and decommissioning experiences for both platforms.
 * Define the appropriate use of Jamf, Intune, Configuration Manager, co-management, and cloud-native management within the endpoint ecosystem.
 * Establish operating-system testing, patching, upgrade, enforcement, exception, and vulnerability-response strategies.
 * Architect identity capabilities using Entra ID, Platform SSO, Windows Hello for Business, Conditional Access, passwordless authentication, and certificates.
 * Define endpoint security standards covering FileVault, BitLocker, privileged access, endpoint protection, data protection, recovery keys, local accounts, and device compliance.
 * Engineer scalable application packaging, deployment, updating, and retirement for macOS and Windows applications.
 * Provide senior technical leadership for complex endpoint, identity, security, application, and management-platform issues.
Application Readiness and Device Adoption

 * Establish a device eligibility framework that identifies the appropriate endpoint platform for each employee persona and business use case.
 * Maintain cross-platform application catalogs identifying supported, conditional, incompatible, and remediation-required applications.
 * Partner with application owners and vendors to address compatibility, licensing, authentication, performance, and supportability requirements.
 * Develop solutions for platform-specific dependencies using SaaS alternatives, browser-based applications, modernization, virtualization, Windows 365, Azure Virtual Desktop, or remote application delivery.
 * Lead pilots and phased deployments to validate application readiness, security, supportability, and employee experience.
 * Develop repeatable migration approaches for user data, applications, identity, settings, collaboration tools, and peripherals.
 * Partner with Change Management, Communications, Learning, and Support teams to develop adoption campaigns, training, and migration guidance.
Automation and Modern Endpoint Operations

 * Build an automation-first engineering practice using PowerShell, Bash, Zsh, Python, Microsoft Graph, Jamf APIs, REST APIs, and orchestration platforms.
 * Automate provisioning, application deployment, configuration, compliance, remediation, patching, inventory, reporting, and lifecycle management.
 * Establish source control, peer review, testing, release management, rollback, and documentation standards for endpoint engineering.
 * Use endpoint telemetry and digital employee experience data to proactively identify reliability, performance, compliance, and user-experience issues.
 * Develop self-service and self-healing capabilities that improve employee productivity and reduce support demand.
 * Explore the responsible use of AI and intelligent automation for troubleshooting, compliance analysis, proactive remediation, and endpoint operations.
Operational Readiness and Technical Leadership

 * Ensure Global Service Desk and deskside teams are prepared to support Apple and Windows platforms at enterprise scale.
 * Define support models, escalation paths, diagnostic workflows, knowledge requirements, and engineering-to-operations handoffs.
 * Identify recurring incidents and engineer permanent, scalable solutions.
 * Maintain architecture diagrams, engineering standards, technical decisions, operational procedures, and support documentation.
 * Mentor endpoint engineers, lead technical design reviews, and establish consistent engineering practices.
 * Influence cross-functional architecture, security, application, and investment decisions without relying on direct authority.


## Related Videos

- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Building a Cross-Platform BLE Client with Kotlin Multiplatform and Kable](https://www.wearedevelopers.com/videos/100250-building-a-cross-platform-ble-client-with-kotlin-multiplatform-and-kable)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)