Microsoft 365 Endpoint Management Architect

Job description

This job is with Kyndryl, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community.

Please do not contact the recruiter directly.

Who We Are
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day.

So why work at Kyndryl?

We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role
Are you passionate about solving complex problems?

Do you thrive in a fast-paced environment?

Then there's a good chance you will love being a part of our Software Engineering - Development team at Kyndryl, where you will be able to see the immediate value of your work.

As a Software Engineering - Developer at Kyndryl, you will be at the forefront of designing, developing, and implementing cutting-edge software solutions.

Your work will play a critical role in our business offering, your code will deliver value to our customers faster than ever before, and your attention to detail and commitment to quality will be critical in ensuring the success of our products.

Using design documentation and functional programming specifications, you will be responsible for implementing identified components.

You will ensure that implemented components are appropriately documented, unit-tested, and ready for integration into the final product.

You will have the opportunity to architect the solution, test the code, and deploy and build a CI/CD pipeline for it.

As a valued member of our team, you will provide work estimates for assigned development work, and guide features, functional objectives, or technologies being built for interested parties.

Your contributions will have a significant impact on our products' success, and you will be part of a team that is passionate about innovation, creativity, and excellence.

Above all else, you will have the freedom to drive innovation and take ownership of your work while honing your problem-solving, collaboration, and automation skills.

Together, we can make a difference in the world of cloud-based managed services.

Your Future at Kyndryl
The career path ahead is full of exciting opportunities to grow and advance within the job family.

With dedication and hard work, you can climb the ladder to higher bands, achieving coveted positions such as Principal Engineer or Vice President of Software.

These roles not only offer the chance to inspire and innovate, but also bring with them a sense of pride and accomplishment for having reached the pinnacle of your career in the software industry.

Who You Are
You're good at what you do and possess the required experience to prove it.

However, equally as important - you have a growth mindset; keen to drive your own personal and professional development.

You are customer-focused - someone who prioritizes customer success in their work.

And finally, you're open and borderless - naturally inclusive in how you work with others.
Required Technical and Professional Expertise
Minimum 10 years of experience required.

Any graduate qualification accepted.

Microsoft 365 Endpoint Management Architect Design and implement a secure, scalable Microsoft 365 Endpoint Management framework (Intune for Windows 10/11, iOS, iPadOS, Android, MacOS, Autopilot for Windows 10/11) supporting multi-entity governance.

Define RBAC, compliance policies to segment and protect devices/data across entities.

Automate workflows (PowerShell and/or Shell scripting) for deployment, threat response, and remediation, while aligning configurations with regulations (GDPR, HIPAA), where applicable.

Standardize Autopilot provisioning for seamless device enrollment and ensure cross-entity collaboration via centralized monitoring (Azure Monitor/Sentinel) and entity-specific playbooks.

Deliver a future-proof platform balancing security, compliance, and operational efficiency.

Develop and maintain device management architecture as multi-tenant/multi-entity Microsoft 365 Endpoint Management framework for Intune, integrate Defender for Endpoint and DLP with Intune and Autopilot.

Define the device management strategy which aligns with the overall business strategies and requirement.

This also aligns with the purpose of the Landing Zone to be pre-configured, scalable and secured Intune based cloud environment for the future migration of client's business entities.

Define governance models for role-based access control (RBAC), device enrollment policies, and segmentation across entities.

Design scalable configuration profiles, update rings, and compliance policies in Intune.

Develop and maintain architecture documentation, including High-Level and LowLevel Design documents Security & Compliance Integration

Integrate Defender for Endpoint with Intune for unified threat detection and response.

Integrate Design Data Loss Prevention (DLP) policies with Intune for endpoints to protect sensitive data across entities.

Ensure compliance with industry standards (e.g., GDPR, HIPAA, CIS) and client internal security policies.

Autopilot Deployment Strategy

Develop a standardized Autopilot provisioning process for zero-touch device deployment.

Configure enrollment profiles, pre-provisioning workflows, and white-glove deployments.

Cross-Entity Collaboration

Collaborate with stakeholders from multiple entities to define shared vs.

entityspecific policies.

Create documentation and templates for consistent adoption across teams.

Document: Job Roles and Skill Sets (JRSS) for Workplace Modernization Services (WMS) Version: v13.1 Date: April 2025 Page 2 of 3 Kyndryl Confidential Kyndryl Confidential Scalability & Automation

Collaborate with respective automation team to create and implement Azure Logic Apps/Power Automate for workflow automation (e.g., device remediation).

Where applicable automate operational tasks and implement configuration-as-code practices to enhance efficiency, scalability.

Deep knowledge of Microsoft 365 Endpoint Manager (Intune), Defender for Endpoint Intune integration and Autopilot.

Extensive hands-on experience with Microsoft Intune in large-scale or enterprise environments

Experience designing multi-tenant/multi-entity Microsoft 365 environments.

Personal development experience.

Good understanding of operating system features, security components, and how they are managed for common client mobile and desktop operating systems (e.g., iOS, iPadOS, macOS, Android, Windows 11 and Windows 10)

Proficiency in PowerShell/Graph API for automation.

Preferred Technical and Professional Experience
Understanding of DLP frameworks, conditional access, and endpoint threat protection.

Familiarity with compliance frameworks (e.g., NIST, ISO 27001).

Strong stakeholder management for cross-entity alignment.

Strong troubleshooting, analytical, and problem-solving skills • Excellent communication, documentation, and collaboration abilities with multitenant/multi-entity-based organization

Knowledge of compliance standards, data protection regulations, and device lifecycle management

Problem-solving for balancing scalability with entity-specific needs

Being You
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are.

We welcome people of all cultures, backgrounds, and experiences.

But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice.

This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture.

That's the Kyndryl Way.

What You Can Expect
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value.

Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey.

Our employee

learning programs

give you access to the best learning in the industry to receive certifications,

including Microsoft,

Google, Amazon, Skillsoft, and many more.

Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations.

At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.

Required Skill Profession

Computer Occupations