MEM (SCCM/Intune) Technical Architect

Job Description MEM Architect (SCCM, Intune & End User Device Management) Life Unlimited. At Smith+Nephew, we design and manufacture technology that takes the limits off living. Join our dynamic team and embark on an exciting journey of innovation and growth as we seek a hard-working and dedicated individual for role of MEM Technical Architect to join our Global IT team. You will be responsible for Microsoft Endpoint Configuration Manager (MECM / SCCM), Microsoft Intune, and hybrid co-management paradigms, with a strategic emphasis on driving a seamless Windows 11 enterprise migration while reshaping the broader end-user services architecture. What will you be doing - As a Visionary Technical Architect, your deep expertise in enterprise endpoint ecosystems to conceptualize, design, and orchestrate transformative device management strategies across a highly distributed global environment. Solution Architecture & Strategic Vision - Assume end-to-end ownership of the enterprise endpoint management architecture, encompassing SCCM, Intune, Intune policies, Co-management frameworks, and Windows 11 transition programs, with a mandate to unify disparate technologies into a cohesive, future-proof ecosystem. - Formulate comprehensive roadmaps and architectural blueprints that accelerate modern device management (MDM/MEM) adoption while aligning with the broader cloud-first and zero-trust paradigms. - Conceptualize and institutionalize governed frameworks for patch orchestration, software distribution pipelines, compliance enforcement, and baseline security postures, ensuring both resilience and regulatory adherence. Windows 11 Transformation Program - Architect and direct the strategic modernization trajectory for enterprise-wide Windows 10 to Windows 11 migration, balancing innovation with operational stability. - Codify governance models that enforce hardware readiness validation, cryptographic assurance (TPM, Secure Boot), and organizational compliance mandates across heterogeneous device estates. - Design and operationalize progressive deployment architectures (rings, phased adoption models, controlled pilots) that minimize disruption while maximizing telemetry-driven insights. Device Lifecycle Architecture & End User Experience - Engineer holistic lifecycle blueprints covering device onboarding, provisioning, enrolment, continuous compliance, in-life management, and secure retirement. - Establish enterprise-wide standards for BYOD, corporate-owned endpoints, and next-generation virtualized workspaces (AVD/VDI), embedding scalability, governance, and security at their core. - Partner with Internal teams, Service Desk, Network, and other functions to elevate operational maturity and user-centric service excellence. Collaboration, Governance & Thought Leadership - Function as the distinguished subject matter authority interfacing with Security, Network, Compliance, and Workplace Services domains, ensuring architectural alignment with enterprise transformation goals. - Institute technical governance frameworks to ensure that all initiatives adhere to cybersecurity mandates, regulatory obligations, and audit imperatives. - Serve as a mentor and architectural guidepost, elevating engineering teams to adopt industry-leading practices, reference models, and design principles, thereby instilling a culture of innovation and technical rigor. What will you need to be successful - Education: Bachelor's degree in IT, Computer Science or Masters in IT, Computer Science an equivalent combination of education and experience. - Preferred Qualifications - - Microsoft M365 Fundamentals (MS-900) - Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) - Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) - Understanding in DEX solutions is an add-on (Nexthink/Aternity/Dynatrace) - Operating Mode: Work from office 5 days in a week. - Experience: - Proven relevant experience of 15+ years of progressive responsibility in End User Computing, Device Management, or Enterprise Infrastructure domains, with a proven track record of delivering complex transformations. - At least 4+ years operating as an Architect, demonstrating the ability to influence technical direction, establish governance, and mentor cross-functional teams. - Prior experience working within large-scale, geographically distributed, multinational organizations, navigating matrix structures, regulatory frameworks, and culturally diverse environments. - Technical Mastery - Demonstrated end-to-end expertise in architecting, configuring, and operationalizing Microsoft Endpoint Configuration Manager (SCCM) and Microsoft Intune (MEM) across complex enterprise environments, with a focus on seamless coexistence, co-management models, but also cloud native. - In-depth command of Windows 10/11 servicing architectures, including feature update orchestration, patch lifecycle governance, and phased deployment methodologies optimized for high-availability enterprises. - Proven leadership in Windows 11 modernization programs, encompassing strategic readiness assessments, migration blueprints, and at-scale execution within regulated, multinational ecosystems. - Advanced proficiency in device compliance enforcement, conditional access strategies, and enterprise security baselines, with the ability to align technical implementation to zero-trust principles. - Strong familiarity with EntraID constructs, Group Policy inheritance models, and hybrid management scenarios, ensuring policy coherence across both cloud-native and legacy-managed devices. - Architectural Acumen - Capacity to engineer globally scalable, resilient, and cyber-secure endpoint management architectures, balancing innovation with operational robustness. - Proficiency in producing high-fidelity architectural deliverables including technical blueprints, decision frameworks, governance playbooks, and executive-level reference models that enable both technical alignment and stakeholder consensus. You. Unlimited. We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve. Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/ Other reasons why you will love it here - Your Future: Major Medical coverage + Policy exclusions and insurance non-medical limit. Educational Assistance. - Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave. - Your Wellbeing: Parents / Parents in Law's Insurance, Employee Assistance Program, Parental Leave. - Flexibility: Hybrid Work Model (For most professional roles) - Training: Hands-On, Team-Customized, Mentorship - Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift. Night Shift Allowances. #YS1 Stay connected by joining our Talent Community. We're more than just a company - we're a community Follow us on LinkedIn to see how we support and empower our employees and patients every day. Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N. Explore our website and learn more about our mission, our team, and the opportunities we offer.