<p>Are you passionate about shaping the future of workplace technology? As a Windows Endpoint Domain Architect, you'll lead the design and evolution of infrastructure architecture for 30,000+ Windows endpoints, driving secure, scalable, and modern solutions that enhance user experience and reduce operational overhead. This is your opportunity to influence enterprise-wide standards and deliver cutting-edge capabilities that keep us ahead of the curve. This hybrid role (in office Tues-Wed-Thurs) can be based in either Charlotte, NC, Dallas, TX, or Malvern, PA</p> <p>What You'll Do:</p> <ul> <li>Architect & Innovate: Define and evolve endpoint management patterns leveraging Intune, SCCM, Autopilot, and cloud integrations. </li><li>Technology Governance: Oversee BOAT (Bringing On Additional Technologies) reviews to ensure minimal overlap and compliance with deployment standards. </li><li>Secure & Comply: Implement solutions aligned with SEC, SOX, PCI requirements, enforcing DLP, least privilege, and auditability. </li><li>Modernize the Workplace: Drive adoption of Windows 11, Azure Virtual Desktop, and automation through Logic Apps, Runbooks, and other Azure tools. </li><li>Optimize Operations: Reduce manual effort with automation (PowerShell, GitHub Actions) and streamline support workflows. </li><li>Collaborate & Align: Partner with engineering, security, and support teams to deliver solutions that meet business needs and technical standards. </li><li>Document & Govern: Maintain architecture artifacts, reference models, and approval workflows (ARB/MCC/SAR/SARB). </li></ul> <p>Your Expertise:</p> <p>Operating Systems: Windows 10/11 (macOS experience a plus)</p> <p>Endpoint Management: Intune, SCCM, Autopilot, AVD (JAMF helpful)</p> <p>Security Tools: CrowdStrike, Tanium, Digital Guardian, Elastic SIEM</p> <p>Cloud & Automation: Azure, Logic Apps, Power Automate, GitHub Actions</p> <p>Networking: Zscaler, Cisco/Aruba segmentation, firewall validation</p> <p>Scripting & DevOps: PowerShell, JSON, YAML, Git (C# legacy)</p> <p>Compliance: Data residency, export controls, audit logging, PII/PHI handling</p> <p>Qualifications:</p> <p>Minimum of eight years related work experience, with at least three years in a technology architect role.</p> <p>Undergraduate degree or equivalent combination of training and experience; graduate degree preferred.</p> <p>Special Factors</p> <p>Sponsorship</p> <p>Vanguard is not offering visa sponsorship for this position.</p> <p>About Vanguard</p> <p>At Vanguard, we don't just have a mission-we're on a mission.</p> <p>To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p> <p>How We Work</p> <p>Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p>