Endpoint & Device Management Architect

1 week ago Be among the first 25 applicants

This role is a remote opportunity, and it is tied to the legal entity in the country of hire. Therefore, candidates must be physically located in one of these countries and legally authorized to work there. Due to employment regulations, we are unable to consider applicants based outside these locations posted.

Czech Republic, Spain, Portugal, Greece, Poland

Innovation starts from the heart. At Edwards Life sciences, we’re dedicated to developing ground‑breaking technologies with a genuine impact on patients’ lives. At the core of this commitment is our investment in cutting‑edge information technology. This supports our innovation and collaboration on a global scale, enabling our diverse teams to optimize both efficiency and success. As part of our IT team, your expertise and commitment will help facilitate our patient‑focused mission by developing and enhancing technological solutions.

We are seeking an experienced and strategic technical lead for Endpoint Architecture to oversee the end user compute function for our global medical device manufacturing organization. This role sits above the teams responsible for SCCM, Intune, Jamf, and Apple Business Manager. The employee will define architecture, best practices, tooling strategy, governance, and operational excellence, ensuring our global endpoints and manufacturing systems are secure, efficient, scalable, compliant, and deliver a great user experience.

• Own and govern the endpoint environment including desktop, laptop, VDI and mobile device, acting as the single point of accountability for architecture, standards, and operational health of the endpoint ecosystem.
• Govern and oversee all changes to endpoint management tooling, configurations, policies, and processes – review and approve change requests, ensuring they follow best practices, align with security requirements, and are well‑tested before deployment.
• Chair or participate in change advisory processes for endpoint‑related initiatives, balancing business needs with stability and user experience.
• Define and maintain environment baselines (OS builds, configurations, security settings, compliance rules) and enforce drift detection / remediation processes.
• Define and maintain endpoint management architecture & roadmap, covering Windows and Apple device endpoints (laptop and mobile), including OS provisioning, imaging, zero‑touch deployment, BIOS updates, build vs BYOD policies, lifecycle management.
• Support information security directives by aligning to technical standards and best practices for endpoint security including hardening, vulnerability and patch management, asset management.
• Oversee tool evaluation, selection, integration and optimization device management at scale, ensuring efficient operations, cost‑effectiveness, and alignment with cybersecurity policies.
• Ensure endpoint fleet health: define and monitor metrics (e.g. compliance, patching status, device inventory accuracy, proactive endpoint incident identification), and set up alerts / dashboards.
• Provide escalation support for advanced, cross‑platform endpoint issues and architecture‑level troubleshooting.
• Collaborate with security, network, infrastructure, operations, Service Desk, procurement, and business stakeholders to ensure endpoint strategies align with broader corporate goals.
• Mentor and guide the SCCM / Intune / Jamf teams; define SOPs, documentation, runbooks, training for staff.
• Stay up to date with industry trends, emerging endpoint technologies, platform changes (Windows, macOS, iOS, Android); evaluate and recommend adoption where beneficial.
• Conduct cost/benefit analyses, total cost of ownership, licensing, and help manage vendor relationships for endpoint tools and services.

• 7‑10+ years of experience in endpoint device management in large enterprises (20,000+ endpoints preferred).
• Demonstrated technical expertise in Windows endpoint troubleshooting and management: SCCM / MECM, Intune / Microsoft Endpoint Manager, imaging / OS deployment tools, GPO / policy management,…