> Markdown version of [/jobs/ext/66726-modern-endpoint-euc-architect](https://www.wearedevelopers.com/jobs/ext/66726-modern-endpoint-euc-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Modern Endpoint/ EUC Architect - **Company:** Sword Group - **Location:** Edinburgh, UK - **Contract:** Temporary contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Apple IOS, Application Packaging, Microsoft Azure, BitLocker Drive Encryption, Cloud Computing, Configuration Management, System Configuration, Multi-Factor Authentication, Firmware, Sync (Unix), High-Level Architecture, Microsoft Security Essentials, Windows API, Virtual Desktops, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, SSL Certificate Management, Microsoft InTune, Azure Security Center, Deployment Automation, CIS Benchmarks - **Published:** May 30, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=c31265da274acb5e ## About the Role Do you have experience in macOS?, Proven ability to lead the architecture, design and hands-on delivery of complex endpoint or modern workplace solutions for mid-market and enterprise customers. * Strong experience acting as the senior technical lead across discovery, design, implementation, migration and operational handover activities. * Demonstrable experience in technical consulting, engineering or architecture roles, with significant focus on endpoint management, security and modern workplace transformation. * Experience producing and owning assessments, strategies, roadmaps, high-level designs, low-level designs, implementation plans, standards and operational architecture artefacts. * Ability to build trusted client relationships, provide technical leadership to engineers and influence stakeholders at both technical and leadership levels. * Relevant Microsoft certifications such as MD-102, MS-102, SC-300, AZ-104 or expert-level architecture or security certifications are desirable. * Experience working in security-conscious or regulated environments; SC and/or NPPV3 clearance would be beneficial but is not essential. Essential Experience: * Deep hands-on expertise in modern endpoint architecture using Microsoft Intune across Windows 10/11, iOS/iPadOS and Android, with sound awareness of macOS management principles. * Designing and implementing Windows Autopilot and modern provisioning strategies, including enrolment models, ESP optimisation, deployment profiles, identity integration and lifecycle considerations. * Architecting Windows servicing and device lifecycle strategies using Windows Update for Business, feature updates, driver and firmware controls, and Windows Autopatch. * Strong experience with application packaging, testing and deployment, including Win32 applications, Microsoft 365 Apps, the modern Microsoft Store and automation-led deployment approaches. * Strong understanding of Microsoft Entra ID, Conditional Access, MFA, device compliance and identity-driven access controls, with the ability to align endpoint architecture to Zero Trust principles. * Hands-on experience designing and implementing endpoint security controls using security baselines, Settings Catalog, BitLocker, Windows Hello for Business, Cloud LAPS, Microsoft Defender for Endpoint, WDAC and AppLocker. * Strong capability in MDM/MAM design with Intune, including app protection, BYOD strategy, corporate-owned device management and platform governance. * Good knowledge of Active Directory, hybrid identity, Entra Connect Sync and Cloud Sync, certificate management, RBAC and dependency mapping across the wider Microsoft 365 platform. * Ability to translate business, security and operational requirements into practical architecture standards, implementation designs and supportable service outcomes. * Experience using PowerShell and Microsoft Graph to support automation, reporting, configuration consistency and operational efficiency. Desirable Experience: * Co-management capabilities and integration with Microsoft Configuration Manager. * Intune Suite capabilities such as Remote Help, Endpoint Privilege Management, Advanced Analytics or Cloud PKI. * Microsoft Tunnel, specialist mobile management scenarios, and broader cross-platform endpoint management practices. * Designing and deploying Windows 365 Cloud PC and/or Azure Virtual Desktop solutions as part of a wider modern workplace strategy. * Dynamic groups, assignment filters, policy sets and reporting or dashboarding for endpoint posture and service performance. * Good understanding of wider Microsoft 365 workloads and how endpoint, identity, security and collaboration services integrate. * Awareness of Microsoft Security Copilot or AI-assisted operations in endpoint and security administration. ## Description * Assess current environments and define target-state architectures, migration approaches and implementation roadmaps. * Produce high-quality design documentation including assessments, high-level designs, low-level designs and implementation plans. * Provide technical leadership across discovery, design, implementation, testing and transition to support. * Design secure, scalable and supportable solutions aligned to Zero Trust principles and organisational compliance requirements. * Work closely with clients and internal teams to shape requirements, run workshops and guide technical decision-making. * Support endpoint security design across compliance, device configuration, identity integration and protection capabilities. * Contribute to pre-sales activity including solution shaping, technical input to proposals, statements of work and delivery estimates. * Act as a trusted advisor to clients and a senior technical authority within endpoint transformation engagements. * Support practice development through reusable standards, architecture patterns and continuous improvement., At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don't tick all the boxes but feel you have some of the relevant skills and experience we're looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us. ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [How we built an AI-powered code reviewer in 80 hours](https://www.wearedevelopers.com/videos/1511-how-we-built-an-ai-powered-code-reviewer-in-80-hours) - [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Hacking C# from the inside - how to do anything in NET](https://www.wearedevelopers.com/videos/117-hacking-c-from-the-inside-how-to-do-anything-in-net) - [Harnessing Apple Intelligence: Live Coding with Swift for iOS](https://www.wearedevelopers.com/videos/1515-harnessing-apple-intelligence-live-coding-with-swift-for-ios) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)