Roles & Responsibilities:
- Design and maintain the enterprise Cloud PC reference architecture and landing zone, including identity boundaries, network topology, security guardrails, image standards, and operational readiness requirements.
- Define and operate the Cloud PC image factory, including versioning, automated validation, blue–green promotion, performance baselines, and rollback criteria.
- Establish reusable identity, access, and security patterns using Entra ID, Conditional Access, RBAC, and Just-In-Time privilege principles for multiple personas.
- Develop an observability model with measurable service level objectives (SLOs) for user experience, provisioning reliability, and service health, including dashboards, alerts, and runbooks.
- Integrate Cloud PC with enterprise ITSM and CMDB processes, including change control templates, configuration items, and operational playbooks.
- Define a pragmatic user profile strategy leveraging OneDrive Known Folder Move while documenting exceptions such as FSLogix.
- Drive FinOps practices through cost modeling, forecasting, SKU optimization, and usage efficiency improvements.
- Develop resilience and continuity patterns including failover, data residency compliance, and recovery validation.
- Enable enterprise use cases such as privileged workstations, developer environments, contractor onboarding, seasonal scaling, M&A integration, and GPU workloads.
- Collaborate with engineering, security, compliance, and business teams to align Cloud PC strategy with enterprise modernization initiatives.
Qualifications & Skills : - Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent practical experience.
- Strong experience in enterprise architecture across identity, endpoint management, virtualization, and automation.
- Expertise in building and governing reference architectures, landing zones, and image lifecycle frameworks.
- Hands-on experience with Windows 365, Intune, Entra ID, Azure Monitor, and automation pipelines.
- Strong knowledge of observability, ITSM integration, CMDB governance, and FinOps practices.
- Proven ability to translate business and compliance requirements into scalable, secure Cloud PC or VDI solutions.
- Experience in large-scale enterprise environments with endpoint lifecycle management.
- Strong documentation and communication skills with ability to produce architectural standards and roadmaps.
Certifications (Expected / Value-Added):
- Microsoft 365 Certified: Fundamentals (MS-900)
- MD-102: Endpoint Administrator
- AZ-305: Azure Solutions Architect Expert
- TOGAF 9
- SC-900: Security, Compliance, and Identity Fundamentals
- AZ-104: Azure Administrator Associate
- SC-300: Identity and Access Administrator
- AZ-140: Azure Virtual Desktop
Experience:
- Minimum 5+ years in enterprise endpoint management
- 3+ years with Intune and Entra ID
- 2+ years with Windows 365 Cloud PCs
- Preferred 5–7 years in large-scale environments (10,000+ endpoints)
- Experience with Azure Monitor, Log Analytics, ServiceNow/Jira, and CMDB
- Strong exposure to FinOps, licensing optimization, and consumption analytics
|