Digital Security

**Job Description: - Endpoint& Desktop Engineering Architect**

The Microsoft Endpoint Virtualization Solution Architect role plays a crucial role in helping True Tandem's customers design, develop, and deploy Endpoint Virtualization solutions and Rollout solutions. They need expert-level experience and knowledge of Endpoint virtual machine Management architecture, administration, best practice recommendations, and high-level experience with Microsoft SCCM/MECM/Intune Autopilot. The architect is responsible for infrastructure design and setup of the virtualised environment, Windows patching, and hardware specifications.

**Key Functional Areas of Expertise**
- Architects and consulting roles in the projects,
- Design and implementation, hands-on experience
- Technical specialization / External certifications
- Build the vital competency centres.
- Excellent quality of delivery
- Build a portfolio of successful projects, references, and credentials.
- Market research

**Technical Expertise**
- I have 8 to 10 or more years of experience in Architecture and Design solutions, Migration and Consolidation, and rollout of end-user device rollouts like Win 10/11 and Virtulization environments.
- Experience working in a Transitional multi-supplier environment within a large-scale organization. Experience in leading significant technical solution design and development, leveraging existing tool suites, and proposing best-of-breed solutions.
- Setup of Policies
- Design, deploy, and manage Windows 365 cloud PCs for optimal performance, security, and availability.
- Provision and configure cloud PCs, including desktop images, user profiles, and policies.
- Monitor service health, troubleshoot issues, and ensure continuous operation of Windows 365 services.
- Re-provision cloud PCs as needed and implement Microsoft Intune packaging.
- Restart and resolve Windows OS and app installation issues specific to cloud PCs.
- Collaborate with IT teams to integrate Windows 365 and Azure Virtual Desktop (AVD) with existing infrastructure.
- Plan and execute migrations to Windows 365 and Azure VDI with mínimal disruption.
- Manage AVD session hosts and deploy Azure Virtual Desktops in production.
- Implement security policies and perform security hardening of VDI infrastructure.
- Manage images efficiently and configure Azure Premium File Share and Azure NetApp Files.
- Troubleshoot FSLogix and optimize user profile performance for AVD hosts.
- Familiar with Azure IaaS, Key Vault, and autoscale configurations.
- Maintain VDI workloads in the Azure cloud and understand network connectivity to Azure.
- Proficient in PowerShell, ARM templates, and Infrastructure as Code (IaC) tools.
- Configure Azure Monitor and automate repetitive tasks to improve service delivery.
- Troubleshoot virtual desktops in Citrix and VMware environments and maintain relevant documentation.
- Knowledge of ITIL processes and experience with ServiceNow and other ticketing tools.
- M365 Security Products (Microsoft Defender ATP, MDAV, Azure RMS)
- Microsoft Windows 10 Security and Management (Bit locker, MBAM, Device Guard, Credential Guard)
- Windows 10 driver, power utility
- Distribution points - Capacity constraints in distribution points
- AD/GPO/Azure Cloud integration
- Good experience in Microsoft Cloud/Hybrid Cloud Management. Onboarding and configuring and transitioning to the cloud.
- Exposure to Integration and Network security
- Understanding of LAN, WAN & voice network environments, routing protocols, and various technology architectures, including TCP/IP, DHCP, DNS, LAN, WAN, Wireless, VPN
- Extensive hands-on support experience in supporting Windows 10 and the O365 Office suite of programs.