Job Summary:

The End-Point Lead/Architect owns the strategy, architecture, and team leadership for endpoint management across the Mosaic Infrastructure Managed Services engagement, supporting roughly 11,000+ endpoints across the United States, Canada, Brazil, Peru, and Paraguay. This role combines deep technical expertise in Microsoft SCCM (Configuration Manager/MECM) and Microsoft Intune with people leadership of the End-Point Engineer Sr./Jr. team, and is a key driver of the account's ongoing migration from traditional, on-premises endpoint management toward modern, cloud-first management. Responsibilities:

- Own the end-to-end architecture and roadmap for endpoint management across SCCM (Configuration Manager/MECM) and Microsoft Intune, including the co-management strategy between the two platforms.

- Lead the End-Point Engineer Sr./Jr. team, assigning work, setting technical direction, and reviewing complex endpoint engineering deliverables.

- Design and govern device configuration profiles, compliance policies, and security baselines in Intune, aligned to client security requirements.

- Drive the migration of managed endpoints from traditional SCCM-based management to modern, cloud-first Intune management, including Windows Autopilot deployment strategy.

- Own OS deployment (OSD), imaging, application packaging, and patch management standards across the managed endpoint estate.

- Serve as the primary escalation point and subject matter expert for complex endpoint issues that exceed Tier 2/3 support.

- Partner with the Security and NOC teams to ensure endpoint compliance policies,



patching cadence, and vulnerability remediation are met.

- Coordinate mobile device management (MDM) and mobile application management (MAM) policy design, in line with the client's defined mobile device scope and exclusions.

- Maintain accurate documentation of the endpoint architecture, standards, and configuration baselines.

- Support hardware refresh and large-scale endpoint transition/migration programs, including planning and execution oversight.

- Mentor and develop End-Point Engineer Sr./Jr. staff on SCCM/Intune administration and modern endpoint management practices.

- Report on endpoint compliance, deployment health, and project status to the Infrastructure Manager and client stakeholders. Skills and Experience:

Required Qualifications

- Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.

- 5+ years of experience in end-user computing/endpoint engineering, including at least 2 years in a lead or architect capacity.

- Deep hands-on expertise with Microsoft SCCM (Configuration Manager/MECM), including OSD, application packaging, and patch management.

- Deep hands-on expertise with Microsoft Intune,



including device configuration profiles, compliance policies, security baselines, and Windows Autopilot.

- Solid understanding of SCCM/Intune co-management architecture and modern management transition strategies.

- Working knowledge of Entra ID (Azure AD), including hybrid join and conditional access concepts as they relate to endpoint management.

- Strong verbal and written communication skills in English; ability to advise stakeholders on endpoint strategy and roadmap.

- Experience leading or mentoring a technical team.

Preferred Qualifications

- Microsoft certification(s) relevant to endpoint management (e.g., Microsoft 365 Certified: Endpoint Administrator Associate).

- Experience managing endpoints across a multi-country enterprise environment.

- Experience with macOS or mobile device management (iOS/Android) in addition to Windows.

- Experience in a managed services or outsourced IT delivery environment supporting enterprise clients.

- Bilingual English/Spanish or English/Portuguese a plus.

- ITIL Foundation certification.

Technical Skills & Tools

- Microsoft SCCM / Configuration Manager (MECM).

- Microsoft Intune / Microsoft Endpoint Manager.

- Windows Autopilot, OS deployment (OSD), and application packaging.

- Entra ID (Azure AD), conditional access, and hybrid join concepts.

- Endpoint security baselines, compliance policies, and patch management (Windows Updates, WSUS, Intune Update Rings).

- ITSM/ticketing platforms (ServiceNow or equivalent).

📌 End-Point Lead / Architect (Bogotá)
🏢 Auxis
📍 Bogotá