This job has closed.

VARITE INC · 1 day ago

Intune Architect, GCC Enterprise Environment

Los Angeles, CA

Full-time

Onsite

Senior Level

$50/hr - $55/hr

5+ years exp

VARITE INC is a company seeking an Intune Architect to support complex projects in enterprise architecture. The role involves leading the redesign and implementation of enterprise endpoint management within a Windows-based, GCC environment, focusing on security and compliance.

Information Technology & Services

Growth Opportunities

Responsibilities

Apply functional and technical expertise to support complex projects in applying organizing principles and methods of enterprise architecture

Support the attainment of business strategy and its alignment with processes and information technology strategy

Lead the re-design and implementation of enterprise endpoint management in a Windows-based, GCC environment

Develop secure, compliant, and scalable endpoint strategies within Microsoft 365 and Entra ID ecosystems

Architect and manage Intune endpoint deployments for Windows 10/11 at enterprise scale

Design and implement Conditional Access policies in Entra ID, incorporating Intune compliance, multi-factor authentication (MFA), and Zero Trust principles

Produce architecture documentation, governance playbooks, and deliver effective knowledge transfer to IT teams

Communicate complex technical concepts clearly and effectively to both executive leadership and technical teams

Qualification

Microsoft IntuneMicrosoft 365Entra IDZero Trust principlesPowerShellMicrosoft Graph APICJIS complianceHIPAA complianceFedRAMP High complianceDISA STIGsCIS BenchmarksArchitecture documentationKnowledge transferCommunication skills

Required

An Enterprise Architect possesses knowledge and technical expertise in standards and technologies to support complex business analysis, solution selection, systems design, and application integration

The Intune Architect, GCC Enterprise Environment, will possess the knowledge and technical expertise to lead the re-design and implementation of enterprise endpoint management in a Windows-based, GCC environment

Expertise in developing secure, compliant, and scalable endpoint strategies within Microsoft 365 and Entra ID ecosystems

Advanced proficiency in architecting and managing Intune endpoint deployments for Windows 10/11 at enterprise scale

Skilled in designing and implementing Conditional Access policies in Entra ID, incorporating Intune compliance, multi-factor authentication (MFA), and Zero Trust principles

Familiarity with security and compliance frameworks in GCC environments, including CJIS, HIPAA, FedRAMP High, DISA STIGs, and CIS Benchmarks

Hands-on experience with Autopilot provisioning, application packaging, BitLocker encryption, and certificate-based authentication

Ability to produce architecture documentation, governance playbooks, and deliver effective knowledge transfer to IT teams

Demonstrated ability to communicate complex technical concepts clearly and effectively to both executive leadership and technical teams; adept at aligning messaging with strategic business priorities while maintaining technical precision for engineering and operations

This classification must have a minimum of five (5) years of applying Enterprise Architecture principles. At least three (e) years of that experience must be in a lead capacity

Minimum 5 years of enterprise endpoint management, with at least 3 years designing and implementing solutions using Microsoft Intune, such as experience integrating Intune with Microsoft 365 services such as Purview (DLP), Microsoft Defender for Endpoint (MDE), and Office app deployment/update channels

Minimum 5 years of proven success integrating Intune with Microsoft 365 and Entra ID in large-scale enterprise or GCC environments

3-5 years with a strong foundation in Zero Trust security principles, encryption technologies, and compliance-driven architectural design

3-years hands-on expertise in automation using PowerShell and Microsoft Graph API

This classification requires the possession of a bachelor's degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for-year basis

This classification must hold relevant Microsoft certifications such as MD-102 (Endpoint Administrator), SC-300 (Identity & Access Administrator), MS-102 (Microsoft 365 Administrator), and SC-100 (Cybersecurity Architect)