Microsoft 365 Endpoint Management Architect

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Are you passionate about solving complex problems? Do you thrive in a fast-paced environment? Then there's a good chance you will love being a part of our Software Engineering - Development team at Kyndryl, where you will be able to see the immediate value of your work.

As a Software Engineering - Developer at Kyndryl, you will be at the forefront of designing, developing, and implementing cutting-edge software solutions. Your work will play a critical role in our business offering, your code will deliver value to our customers faster than ever before, and your attention to detail and commitment to quality will be critical in ensuring the success of our products.

Using design documentation and functional programming specifications, you will be responsible for implementing identified components. You will ensure that implemented components are appropriately documented, unit-tested, and ready for integration into the final product. You will have the opportunity to architect the solution, test the code, and deploy and build a CI/CD pipeline for it.

As a valued member of our team, you will provide work estimates for assigned development work, and guide features, functional objectives, or technologies being built for interested parties. Your contributions will have a significant impact on our products' success, and you will be part of a team that is passionate about innovation, creativity, and excellence. Above all else, you will have the freedom to drive innovation and take ownership of your work while honing your problem-solving, collaboration, and automation skills. Together, we can make a difference in the world of cloud-based managed services.

Your Future at Kyndryl
The career path ahead is full of exciting opportunities to grow and advance within the job family. With dedication and hard work, you can climb the ladder to higher bands, achieving coveted positions such as Principal Engineer or Vice President of Software. These roles not only offer the chance to inspire and innovate, but also bring with them a sense of pride and accomplishment for having reached the pinnacle of your career in the software industry.

Who You Are

You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.

Required Technical and Professional Expertise

• Minimum 10 years of experience required.
• Any graduate qualification accepted.
• Microsoft 365 Endpoint Management Architect Design and implement a secure, scalable Microsoft 365 Endpoint Management framework (Intune for Windows 10/11, iOS, iPadOS, Android, MacOS, Autopilot for Windows 10/11) supporting multi-entity governance.
• Define RBAC, compliance policies to segment and protect devices/data across entities.
• Automate workflows (PowerShell and/or Shell scripting) for deployment, threat response, and remediation, while aligning configurations with regulations (GDPR, HIPAA), where applicable.
• Standardize Autopilot provisioning for seamless device enrollment and ensure cross-entity collaboration via centralized monitoring (Azure Monitor/Sentinel) and entity-specific playbooks.
• Deliver a future-proof platform balancing security, compliance, and operational efficiency.
• Develop and maintain device management architecture as multi-tenant/multi-entity Microsoft 365 Endpoint Management framework for Intune, integrate Defender for Endpoint and DLP with Intune and Autopilot.
• Define the device management strategy which aligns with the overall business strategies and requirement. This also aligns with the purpose of the Landing Zone to be pre-configured, scalable and secured Intune based cloud environment for the future migration of client's business entities.
• Define governance models for role-based access control (RBAC), device enrollment policies, and segmentation across entities.
• Design scalable configuration profiles, update rings, and compliance policies in Intune.
• Develop and maintain architecture documentation, including High-Level and LowLevel Design documents Security & Compliance Integration
• Integrate Defender for Endpoint with Intune for unified threat detection and response.
• Integrate Design Data Loss Prevention (DLP) policies with Intune for endpoints to protect sensitive data across entities.
• Ensure compliance with industry standards (e.g., GDPR, HIPAA, CIS) and client internal security policies. Autopilot Deployment Strategy
• Develop a standardized Autopilot provisioning process for zero-touch device deployment.
• Configure enrollment profiles, pre-provisioning workflows, and white-glove deployments. Cross-Entity Collaboration
• Collaborate with stakeholders from multiple entities to define shared vs. entityspecific policies.
• Create documentation and templates for consistent adoption across teams. Document: Job Roles and Skill Sets (JRSS) for Workplace Modernization Services (WMS) Version: v13.1 Date: April 2025 Page 2 of 3 Kyndryl Confidential Kyndryl Confidential Scalability & Automation
• Collaborate with respective automation team to create and implement Azure Logic Apps/Power Automate for workflow automation (e.g., device remediation). Where applicable automate operational tasks and implement configuration-as-code practices to enhance efficiency, scalability.
• Deep knowledge of Microsoft 365 Endpoint Manager (Intune), Defender for Endpoint Intune integration and Autopilot.
• Extensive hands-on experience with Microsoft Intune in large-scale or enterprise environments
• Experience designing multi-tenant/multi-entity Microsoft 365 environments.
• Personal development experience.
• Good understanding of operating system features, security components, and how they are managed for common client mobile and desktop operating systems (e.g., iOS, iPadOS, macOS, Android, Windows 11 and Windows 10)
• Proficiency in PowerShell/Graph API for automation.

• Understanding of DLP frameworks, conditional access, and endpoint threat protection.
• Familiarity with compliance frameworks (e.g., NIST, ISO 27001).
• Strong stakeholder management for cross-entity alignment.
• Strong troubleshooting, analytical, and problem-solving skills • Excellent communication, documentation, and collaboration abilities with multitenant/multi-entity-based organization
• Knowledge of compliance standards, data protection regulations, and device lifecycle management
• Problem-solving for balancing scalability with entity-specific needs