The End User Computing Architect is the technical subject matter expert (SME) responsible for the strategy, design, and standards governing PAM Health’s endpoint and end user computing technology stack, including Microsoft Intune, Imprivata Enterprise Access Management (EAM), and thin client platforms (Dell Wyse ThinOS, IGEL). This position is guidance-focused rather than primarily hands-on-keyboard: it designs policies and technical standards, evaluates and recommends new tools and technologies, keeps the organization current with industry best practices, and works with the engineering and support staff who implement day-to-day to ensure their configurations and solutions stay aligned with those standards. The role does retain a meaningful hands-on component, however: working the most complex or business-critical escalations directly, validating new configurations hands-on during early-stage pilots before handing off to the engineering team, and providing after-hours/on-call support when critical, business-impacting incidents require it. The role also translates business and clinical requirements into technical solutions and ensures the organization is getting full value out of its existing and newly adopted platforms.

I. Position Responsibilities

· Technical Strategy & Governance: Serves as the organization’s subject matter expert (SME) for endpoint and end user computing technologies (Microsoft Intune, Imprivata Enterprise Access Management, thin client platforms, and related tooling), setting technical direction and providing guidance and mentorship to the engineering and support staff who implement and operate these platforms day to day.

· Policy & Standards Design: Designs and maintains policies, configuration standards, and best practices for device management, identity/authentication, and endpoint security, and ensures staff and deployed solutions remain aligned with them.

· Business Requirements Translation: Partners with clinical, operational, and business stakeholders to gather and understand requirements, and translates them into technical architecture and solution designs across the endpoint and identity technology stack.

· Tool & Technology Evaluation: Researches, evaluates, and recommends new tools and technologies to address business and technical needs, and continually assesses whether existing platforms (Intune, Imprivata, thin client, etc.) are being used to their full potential, recommending configuration or licensing changes to close any gaps.

· Intune Policy & Compliance Architecture: Designs device compliance policies, configuration profiles, application deployment strategy, and conditional access architecture, and defines the standards administrators follow, in support of the organization’s Intune Maturation and Standardization initiative.

· Imprivata & Authentication Architecture: Defines the architecture, deployment model, and configuration standards for Imprivata Enterprise Access Management (EAM), and designs tap-and-go authentication workflows appropriate to each device classification (Shared Clinical, Dedicated Clinical, Roaming, Corporate, VIP).

· Thin Client Standards: Evaluates and selects thin client platforms (Dell Wyse ThinOS, IGEL OS) and defines provisioning, configuration, and lifecycle standards for supported clinical and administrative use cases.

· Patch & Vulnerability Management Policy: Defines patch management and vulnerability remediation policy, including risk-based prioritization criteria and target remediation timelines, and holds the engineering team accountable to those standards.

· Testing & Pilot Strategy: Defines the test strategy, validation criteria, and workflow diagrams used to pilot new endpoint technologies and configurations prior to production rollout; personally builds and validates early-stage pilot configurations hands-on before handing off to the engineering team for full-scale rollout, and reviews pilot results to inform go/no-go recommendations.

· Documentation & Architecture Standards: Owns technical documentation, architecture diagrams, runbooks, and standard operating procedures for all endpoint technologies, ensuring they reflect current standards and are followed consistently.

· Escalation, Advisory & On-Call Support: Acts as the final escalation point and technical advisor for complex, cross-system issues, typically guiding the engineering and support team through root-cause analysis; engages hands-on directly for the most complex or business-critical incidents, and provides after-hours/on-call support as needed.

· Digital Employee Experience (DEX) & Continuous Improvement: Defines DEX monitoring strategy and KPIs, and uses the resulting data, along with ongoing awareness of industry best practices, to drive a continuous improvement roadmap for endpoint performance, reliability, and user experience.

II. Leadership

· Inclusiveness: Promotes cooperation, fairness and equity; shows respect for people and their differences; works to understand perspectives of others; demonstrates empathy; brings out the best in others and in his/her team

· Managing Staff: Coaches, evaluates, develops, and inspires staff; sets expectations; recognizes achievements

· Stewardship and Resource Management: Demonstrates accountability and sound judgment in managing company resources; appropriate understanding of confidentiality and company values; adheres to and supports company policies, procedures and safety guidelines

· Problem-Solving: Identifies problems and involves others in seeking solutions; conducts appropriate analysis and searches for best solutions; effectively and efficiently implements appropriate responses to correct problems; responds promptly and effectively to new challenges

· Decision-Making: Makes clear, consistent decisions; acts with integrity in all decisions; distinguishes relevant from irrelevant information; makes timely, appropriate decisions.

· Strategic Planning and Organizing: Understands company vision and aligns priorities accordingly; measures outcomes; uses feedback to redirect as required; evaluates alternatives; appropriately organizes complex issues to desirable resolution

· Communication: Connects with peers, subordinate employees and all customers; actively listens; clearly and effectively shares information; demonstrates effective oral and written communication skills; negotiates effectively.

· Quality Improvement: Strives for efficient, effective, high-quality performance in self and in the department; delivers timely and accurate results; resilient when responding to matters that are challenging; takes initiative to make improvements

· Leadership: Motivates others; accepts responsibility; maintains high morale in department; develops trust and credibility; expects honest and ethical behavior of self and staff

· Teamwork: Encourages cooperation and collaboration; builds effective teams; works in partnership with others; is flexible; responsive to the needs of others

· Development: Maintains up-to-date skills through involvement with professional organizations and/or continuing education

II. Customer Service

· Maintains the highest level of customer service via courtesy, compassion and positive communication.

· Promotes the mission and vision of PAM Health within the work environment and the community.

· Respects dignity and confidentiality by adherence to all applicable policies and procedures.

III. Health and Safety

· Works in a manner that promotes safety; wears clothing appropriate to the performance of the job.

· Participates in OSHA required training.

· Follows universal precautions as appropriate for position; complies with Employee Health requirements for continued employment.

· Reports unsafe practices to management.

· Knows own role in case of an emergency.

Education and Training: Bachelor’s degree in Information Technology, Computer Science, or a related field, or an equivalent combination of education and relevant work experience. Relevant certifications strongly preferred (e.g., Microsoft Certified: Endpoint Administrator Associate, CompTIA Security+, or Imprivata/IGEL platform certification).

Experience:

· 5+ years of experience in endpoint engineering or architecture roles, with deep technical fluency in Microsoft Intune / Microsoft Endpoint Manager gained through direct hands-on work, now applied at a design and standards-setting level.

· Experience developing patch management and vulnerability remediation policy and risk-based prioritization frameworks.

· Experience evaluating, selecting, and establishing configuration standards for enterprise access management/SSO platforms (Imprivata or a comparable platform) preferred, ideally in a healthcare or similarly regulated environment.

· Experience selecting and standardizing thin client platforms (Dell Wyse ThinOS, IGEL OS) for enterprise deployment.

· Experience translating business and clinical requirements into technical architecture and solution designs.

· Experience with Active Directory / Entra ID hybrid identity, domain trusts, and conditional access.

· Healthcare IT experience preferred, with an understanding of clinical workflows and HIPAA/regulatory compliance considerations.

Knowledge, Skills, and Abilities:

· Deep working knowledge of Microsoft Intune/Entra ID, including compliance policies, configuration profiles, conditional access, and Autopilot Zero Touch Deployment.

· Strong understanding of Imprivata EAM deployment models (Single-User Workstation, Shared Kiosk, Virtual Kiosk) and enterprise SSO/authentication architecture.

· Working knowledge of Active Directory, Entra ID hybrid identity, and domain trust relationships.

· Knowledge of patch management and vulnerability remediation practices, including risk-based prioritization and coordination with security/compliance teams.

· Ability to design, document, and clearly communicate complex technical architectures and workflow diagrams to both technical and non-technical audiences.

· Strong analytical and troubleshooting skills, with the ability to diagnose the root cause of complex, multi-system issues and guide engineering staff through resolution.

· Excellent verbal and written communication skills, with the ability to serve as a technical mentor and SME to team members.

· Strong organizational and project management skills; able to manage multiple concurrent initiatives in a fast-paced healthcare IT environment.

· Ability to evaluate emerging tools and technologies against business needs and make clear, actionable recommendations.

· Ability to influence and align technical staff and solutions to established standards and best practices without direct line authority.

· Working knowledge of ITIL service management processes (incident, problem, and change management).

· Willingness and ability to engage hands-on for complex or business-critical incidents, and to provide after-hours/on-call support when needed.