Endpoint Lead – Active Directory, SCCM || Remote

[Sourabh Diwakar]

Job Title: Endpoint Lead – Active Directory, SCCM & Endpoint Management

Location: Remote (Candidate must be willing to travel onsite to San Francisco, CA as needed)
Job Type: C2C/Contract

 

Job Description

We are seeking an experienced Technical Lead – Active Directory, SCCM & Endpoint Management to lead the architecture, implementation, and management of enterprise endpoint environments. The ideal candidate will have strong expertise in Active Directory, SCCM, Intune, Unified Endpoint Management (UEM), virtualization technologies, endpoint security, and infrastructure architecture.

This role will be responsible for designing scalable endpoint management solutions, supporting research and development environments, driving automation initiatives, managing vendor relationships, and ensuring compliance with organizational security standards.

 

Responsibilities

Endpoint Management & Architecture

• Design and maintain scalable client device architectures supporting research applications and high-performance computing environments.
• Lead the implementation and administration of Unified Endpoint Management (UEM) platforms including:
• SCCM (Microsoft Configuration Manager)
• Microsoft Intune
• KACE SDA/SMA
• Automate endpoint provisioning, software deployment, patch management, and configuration management.
• Architect and implement enterprise backup and recovery solutions for endpoint devices.

Active Directory & Directory Services

• Design and manage Active Directory architecture and organizational structures.
• Configure and maintain Active Directory security groups and access controls.
• Develop and manage Group Policy Objects (GPOs) to enforce enterprise standards.
• Manage service accounts, generic accounts, and device authentication processes.

Virtualization & Remote Access

• Design and implement Virtual Desktop Infrastructure (VDI) and Desktop-as-a-Service (DaaS) solutions.
• Support remote access requirements for users requiring high-performance computing resources.
• Evaluate virtualization technologies and recommend improvements.

Monitoring & Endpoint Operations

• Implement and manage Nexthink solutions for endpoint monitoring and automated remediation.
• Establish proactive monitoring, reporting, and device health management processes.
• Drive automation initiatives to improve operational efficiency and reduce manual effort.

Hardware Lifecycle Management

• Evaluate and standardize next-generation endpoint hardware including:
• GPU-enabled systems
• VR/AR devices
• Specialized research and lab equipment
• Sensors and data collection devices
• Ensure compatibility between endpoint devices and laboratory instrumentation.

Security, Compliance & Risk Management

• Ensure endpoint environments comply with organizational security policies and regulatory requirements.
• Identify security vulnerabilities and implement remediation strategies.
• Develop and enforce endpoint hardening, patching, and security best practices.
• Collaborate with Security and IT teams to maintain compliance standards.

Vendor & Project Management

• Serve as the primary technical point of contact for hardware, software, and endpoint management vendors.
• Monitor vendor performance against SLAs and contractual obligations.
• Lead endpoint-related projects including planning, resource allocation, risk management, and execution.
• Coordinate with internal and external stakeholders to ensure successful project delivery.

Collaboration & Leadership

• Act as the technical liaison between Research & Development teams and Corporate IT/Security organizations.
• Provide technical leadership and mentorship to support teams and administrators.
• Develop training programs and documentation for endpoint technologies and operational procedures.
• Promote continuous improvement and adoption of emerging technologies.

Documentation & Reporting

• Maintain detailed documentation for:
• Endpoint configurations
• Active Directory architecture
• SCCM/Intune environments
• Standard operating procedures
• Troubleshooting guides
• Provide regular status reports on device health, project progress, vendor performance, and operational metrics.

 

Required Skills

• Strong experience with:
• Active Directory
• Group Policy (GPO)
• SCCM (Microsoft Configuration Manager)
• Microsoft Intune
• Unified Endpoint Management (UEM)
• Experience with endpoint provisioning, software deployment, and patch management.
• Expertise in enterprise endpoint architecture and lifecycle management.
• Experience designing and implementing VDI and DaaS solutions.
• Knowledge of Nexthink monitoring and endpoint analytics.
• Strong understanding of enterprise security, compliance, and risk management.
• Experience managing enterprise backup and recovery solutions.
• Experience working with research, laboratory, or highly regulated environments.
• Strong troubleshooting, communication, and leadership skills.

 

Preferred Skills

• Experience with KACE SDA/SMA.
• Knowledge of modern endpoint security solutions and Zero Trust architectures.
• Experience supporting GPU-based workstations and specialized computing environments.
• Familiarity with cloud-based endpoint management platforms.
• Experience leading enterprise infrastructure and endpoint transformation initiatives.

 

Experience Required

• 10+ years of experience in Endpoint Management, Infrastructure, or Systems Engineering.
• 5+ years of experience leading enterprise endpoint management initiatives.
• Proven experience with Active Directory, SCCM, Intune, and endpoint architecture.
• Experience managing large-scale enterprise device environments.

 

Feel free to let me know if you have any question.