Senior Principal - EUC / MDM Platform Architect

Overview

Be the definitive technical authority for the architecture, reference designs, technical standards and engineering direction of the entire end user computing estate (laptops, desktops, mobiles, tablets, virtual desktops, meeting rooms, and specialised or regulated endpoints), serving 50,000+ employees across multiple countries.

What you'll do

• Own the target-state architecture for end user computing: platform selection, device management topology, identity integration, application delivery, security control placement and telemetry.
• Produce and maintain reference architectures, design patterns, technical standards and architecture decision records (ADRs), with trade-offs made explicit.
• Define the technical roadmap underpinning the EUC strategy, including platform migrations, deprecations, convergence of fragmented tooling, and sequencing.
• Continuously evaluate the market (modern management, AI PCs and on-device inference, cloud PC/DaaS economics, zero-trust endpoint models) and separate genuine capability from vendor narrative.
• Act as design authority for all endpoint change: chair or sit on the EUC architecture review board, approve significant designs, and hold veto on standards deviation.
• Set and police the exception process, making deviations visible, time-bound and owned.
• Review and assure supplier and MSP technical designs so partners build to the organisation's architecture.
• Set engineering standards for configuration-as-code, packaging, testing, release management and rollback across the endpoint estate.
• Prototype and prove new capability in a lab before production, and build the reference implementation that engineering teams industrialise.
• Mentor and technically develop senior engineers and platform leads.
• Partner with Cyber Security to embed zero-trust principles at the endpoint, including device trust and attestation, conditional access, least privilege, application control, EDR and DLP placement.
• Architect for regulated and validated environments, including GxP-qualified endpoints, computer system validation (CSV/CSA), data residency and privacy obligations, and audit/SOX ITGC evidence generation.
• Own the technical response to endpoint-relevant threat scenarios and drive architectural remediation of systemic vulnerabilities.
• Architect the digital employee experience (DEX) telemetry model, including what is measured, how it is collected, where it lands, and how it drives automated remediation.
• Design for self-healing and self-service by default, treating every recurring ticket category as an architectural defect until proven otherwise.
• Translate architecture into business consequence (cost, risk, productivity, time-to-value) for senior stakeholders.
• Represent EUC architecture in enterprise architecture forums, security governance, and vendor executive briefings.

What you'll need

• Bachelor's degree in Computer Science, Engineering or a related technical discipline, or equivalent demonstrable professional expertise.
• Overall 15 years of experience, including 12+ years in IT infrastructure or end user computing, and 5+ years in a principal, lead or enterprise architect capacity with recognised design authority.
• Architecture ownership for an endpoint estate of 20,000+ devices across multiple countries and regulatory jurisdictions.
• Expert-level, hands-on-derived command of modern endpoint management (Intune/MECM) and macOS management, sufficient to build the reference implementation personally.
• Demonstrable advanced scripting and automation portfolio, with evidence of configuration-as-code applied to a production endpoint estate.
• Working fluency in enterprise endpoint security and zero-trust architecture, with a track record of co-designing controls alongside a Cyber Security function.
• Led the architecture of at least one large-scale endpoint platform migration or transformation through to production, including the failures and lessons learned.
• Able to produce architecture documentation that withstands external audit and supplier scrutiny.
• Proven credibility with senior engineers and executive stakeholders, in English, in a global matrixed organisation.
• Willingness to travel internationally, approximately 5–15% of the time.

Nice to have

• Experience in a regulated industry (pharmaceutical, life sciences, biotech, financial services or healthcare) with practical GxP/CSV/CSA and Annex 11 / 21 CFR Part 11 exposure.
• Architecture for specialised endpoints: laboratory instrument workstations, manufacturing and shop-floor devices, clinical and field devices, kiosks, shared and multi-user workstations.
• Leading a major platform transformation: SCCM-to-Intune migration, Windows 10 to 11 at scale, MSP transition, or M&A integration/divestment of an endpoint estate.
• Sustainability-aware design, including device longevity, power management, refurbishment and Scope 3 implications.
• Accessibility and assistive technology designed into the standard build.
• Network fundamentals relevant to endpoints, including SASE/ZTNA, split tunnelling, Wi-Fi 6/7, certificate-based network access.
• Contribution to the wider community, such as open-source tooling, conference speaking, published technical writing, or vendor customer advisory boards.
• Relevant certifications (e.g., Microsoft Certified: Endpoint Administrator Expert, Azure Solutions Architect Expert, Cybersecurity Architect Expert, Jamf Certified Expert, TOGAF, CISSP or SABSA).

Details

• Location: Bengaluru, Luxor North Tower.
• Travel: approximately 5–15% international travel.