Location and Eligibility
Physical location required: Czech Republic, Spain, Portugal, Greece, Poland. Candidates must be legally authorized to work in one of these countries. This role is a remote opportunity tied to the legal entity in the country of hire.
About the Company
Innovation starts from the heart. At Edwards Lifesciences, we’re dedicated to developing ground‑breaking technologies with a genuine impact on patients’ lives. Our commitment is underpinned by cutting‑edge information technology that enables our global teams to optimize efficiency and success.
Endpoint Architecture Lead – Overview
We are seeking an experienced, strategic technical lead for Endpoint Architecture to oversee end‑user compute functions for our global medical device manufacturing organization. This role sits above teams responsible for SCCM, Intune, Jamf, and Apple Business Manager, defining architecture, best practices, tooling strategy, governance, and operational excellence to ensure secure, efficient, scalable, compliant endpoint systems and a great user experience.
Your Impact
* Own and govern the endpoint environment across desktop, laptop, VDI, and mobile devices, acting as single point of accountability for architecture, standards, and operational health.
* Govern and oversee all changes to endpoint management tooling, configurations, policies, and processes, ensuring best practices and alignment with security requirements.
* Participate in change advisory processes for endpoint‑related initiatives, balancing business needs with stability and user experience.
* Define and maintain environment baselines (OS builds, configurations, security settings, compliance rules) and enforce drift detection/remediation processes.
* Define and maintain endpoint management architecture & roadmap for Windows and Apple devices, covering OS provisioning, imaging, zero‑touch deployment, BIOS updates, build vs BYOD policies, and lifecycle management.
* Align with information security directives, ensuring endpoint security hardening, vulnerability and patch management, and asset management.
* Oversee tool evaluation, selection, integration, and optimization of device management at scale, ensuring cost‑effectiveness and cybersecurity alignment.
* Define and monitor metrics for endpoint fleet health (compliance, patching status, device inventory accuracy, proactive incident identification), building alerts and dashboards.
* Provide escalation support for advanced cross‑platform endpoint issues and architecture‑level troubleshooting.
* Collaborate with security, network, infrastructure, operations, ServiceDesk, procurement, and business stakeholders to align endpoint strategies with corporate goals.
* Mentor and guide SCCM/Intune/Jamf teams;
develop SOPs, documentation, runbooks, and training.
* Stay current with industry trends and emerging endpoint technologies, recommending adoption where beneficial.
* Conduct cost/benefit analyses, licensing, and vendor relationship management for endpoint tools and services.
Qualifications
* 7–10+ years of end‑point device management experience in large enterprises (20,000+ endpoints preferred).
* Deep technical expertise in Windows endpoint troubleshooting and management: SCCM/MECM, Intune/Microsoft Endpoint Manager, imaging/OS deployment tools, GPO, Autopilot.
* Strong Apple device management skills: Jamf (Pro or similar), Apple Business Manager, macOS/iOS provisioning, security, updates.
* Solid understanding of endpoint security: threat surface, hardening, EDR, encryption, compliance, vulnerability management.
* Proficiency in automation and scripting.
* Experience designing or leading architecture or modernization projects (migrations, tool consolidation/integration).
* Alignment with Microsoft Privileged Access strategy and zero‑trust principles.
* Effective communication skills: presenting to senior management, producing technical designs and documentation, mentoring engineers.
* Vendor evaluation, licensing, and cost management experience.
* Relevant certifications (Microsoft Endpoint, Modern Workplace, Jamf, CISSP, CISM, etc.) are a plus.
Preferred Skills
* Experience in a global manufacturing environment where endpoints directly support core operations and uptime.
* Experience with global follow‑the‑sun support models.
* Familiarity with UEMs and third‑party patching tools.
* Reporting and stakeholder management experience.
* Reports to Head of Endpoint.
* Key stakeholders: Information Security, Infrastructure/Networking, Identity & Access, ServiceDesk/Support, Procurement, Business Unit IT leads, Manufacturing, and cleanroom operations.
What You’ll Do in 6–12 Months
* Complete an audit of the current environment.
* Deliver a clear roadmap with prioritized modernization or consolidation initiatives.
* Improve endpoint health metrics: patch compliance, imaging time, OS update rates.
* Publish and roll out standardized policies and technical baselines.
* Improve issue triage and remediation processes for endpoint troubleshooting.
* Successfully deliver at least one major modernization initiative (e.G., Jamf expansion, mobile security improvements).
* Define hardening standards and drive implementation across the environment.
Additional Information
Reports to Head of Endpoint.
Seniority Level
Mid‑Senior level
Employment Type
Full‑time
Job Function
Design, Art/Creative, and Information Technology
Industries
Medical Equipment Manufacturing
#J-18808-Ljbffr