Endpoint Engineering Architect

Job Description The Endpoint Engineering Architect is a hands‑on position responsible for engineering, automating, securing, and optimizing all end‑user compute platforms including laptops, desktops, thin clients, virtual desktops (AVD), and mobile devices. This role works with the Endpoint Engineering team as a technical lead to design and support the lifecycle processes—imaging, provisioning, patching, configuration, compliance, and monitoring—across Linux, Microsoft Windows, and mobile OS platforms. The ideal candidate is deeply experienced in modern endpoint management, virtualization (AVD), image engineering, automated deployments, and mobility management, bringing strong technical leadership and an automation‑first mindset.

Essential Functions Endpoint Engineering & Platform Management Architect, deploy, and support endpoint solutions across Windows, Linux, macOS, Thin Clients, and Mobile Devices. Design, maintain, and optimize standardized OS images for multiple device types and deployment scenarios. Engineer and maintain automated installation workflows including or equivalent to Autopilot, Tanium Provisioning, XAVD provisioning via W365, AVD provisioning, PXE‑based imaging, and other automated onboarding methods.

Maintain and enhance patch management strategies (OS and application level) across platforms ensuring compliance, stability, and security. Manage endpoint configurations, policies, and compliance baselines across solutions such as or equivalent to Microsoft Intune, Workspace ONE / AirWatch, SOTI, or similar MDM/UEM platforms. Administer virtual desktop infrastructures, particularly Azure Virtual Desktop (AVD), ensuring performance, scale, security, and user experience meet business needs.

Automation, Tools & Infrastructure Experience in developing automation scripts and workflows using methods such as PowerShell, Bash, or JSON/REST APIs, or similar tools to streamline endpoint management processes. Integrate endpoint management platforms with cloud services, Azure Storage, Active Directory / Azure AD, certificate services, and identity/security tooling. Partner with security teams to implement standards for device compliance, identity, secure configurations, and hardening baselines.

Engage in continuous improvement of device provisioning, self‑healing capabilities, app delivery, and user experience. Engineering Ownership & Collaboration Serve as subject matter expert (SME) for major endpoint technologies, providing guidance to operations, service desk, and cross‑functional teams. Participate in roadmap planning for endpoint modernization, including cloud‑based provisioning, hybrid AD → Azure AD Join transitions, and modernization of group policy landscapes.

Contribute to vendor evaluations, hardware standards, and lifecycle planning (device recycling, employee buyback programs, etc.). Document engineering standards, technical designs, change control procedures, and knowledge‑base content. Occasional site visits to view and evaluate technology usage on site may be requested for new technology/customers.

Additional Responsibilities Performs other duties as assigned. Skills And Abilities Endpoint management, engineering, systems administration, or equivalent technical role. Deep expertise in Windows OS engineering, including imaging, MDM provisioning, GPO/Intune configuration, patching, and troubleshooting.

Strong experience with Linux endpoint management (Ubuntu, RHEL, or other enterprise distros). Hands‑on experience with mobile device management (MDM/UEM) using tools or equivalents to Workspace ONE / AirWatch, Intune, or SOTI. Strong proficiency in automation (PowerShell, etc.) and modern deployment technologies.

Experience with Azure Virtual Desktop (AVD) engineering, scaling, performance optimization, and image management. Strong understanding of endpoint security concepts: compliance baselines, conditional access, identity management, certificate‑based authentication, and vulnerability management. Solid knowledge of networking, DNS, DHCP, VPN clients, and cloud identity (Azure AD / Entra ID).

Preferred Skills Experience in hybrid AD → Azure AD migration models and policy modernizations. Experience integrating automation platforms with repositories such as Azure Storage or package management ecosystems (WinGet, or similar tools). Understanding of frontline‑focused hardware (thin clients, low resource devices).

Familiarity with large‑scale enterprise hardware lifecycle processes (procurement → deployment → recycling). Azure certifications: AZ‑104, AZ‑305, or specialty certifications in virtual desktop or endpoint management are a plus. Experience with DEX / enterprise monitoring and self‑healing tooling (e.g., Tanium, NEXthink, etc.) - preferred.

Soft Skills Strong analytical, troubleshooting, and problem‑solving abilities. Excellent communication with both technical and non‑technical stakeholders. Ability to work independently, manage multiple priorities, and influence engineering decisions.

Provide technical leadership and assist fellow engineers on the Endpoint Engineering team. Continuous improvement mindset with passion for automation and efficiency. What This Role Enables Modern, consistent, scalable endpoint experience across the enterprise.

Reduced provisioning time and improved user onboarding through automation and imaging modernization. Increased endpoint reliability through strong patching, compliance, and self‑healing efforts. Support for business initiatives through secure, high‑performance end‑user computing platforms.

Qualifications Bachelor's degree required: Computer science, systems analysis or a related study, or equivalent experience. Ten (10) years or more at least two IT disciplines in a client/server or service‑oriented architecture (SOA) environment, including technical architecture, network management, application development, middleware, database management or operations. Five (5) years or more Domain architecture experience.

SOA design and implementation advanced. Software Development Life Cycle and Agile Development advanced. Enterprise Application Integration advanced preferred.

Compensation Information Pay Type: Salaried Minimum Pay Range: $135,000.00 Maximum Pay Range: $145,000.00 Benefits Information Ryder offers comprehensive health and welfare benefits, to include medical, prescription, dental, vision, life insurance and disability insurance options, as well as paid time off for vacation, illness, bereavement, family and parental leave, and a tax‑advantaged 401(k) retirement savings plan. Equal Employment Opportunity Ryder is proud to be an Equal Opportunity Employer and Drug Free workplace. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with disability. #J-18808-Ljbffr