Windows 365, Endpoint Security & Print Technical Lead

About the role

The Windows 365, Endpoint Security and Print Technical Lead is responsible for the detailed design, build, configuration and validation of Windows 365, endpoint security and enterprise print capabilities in the client environment. The role provides technical leadership across cloud PC provisioning, endpoint protection, secure access, device compliance and print services, working with the Modern Workplace Technical Architect, Intune Platform SME, SOE Engineer and identity, network and security teams. It integrates these capabilities with Microsoft Intune, Microsoft Entra ID, Microsoft Defender for Endpoint, Microsoft Universal Print and Pharos Cloud.

Key responsibilities

• Lead the detailed design and implementation of Windows 365 and Cloud PC capabilities.
• Configure Windows 365 provisioning policies, Azure network connections, device images, user assignments and access controls.
• Design connectivity and endpoint requirements for accessing Windows 365 from approved Windows and thin-client devices, and validate third-party thin-client compatibility.
• Design and configure endpoint security policies with Intune and Defender for Endpoint, including antivirus, firewall, EDR, disk encryption, compliance and device control.
• Design and implement enterprise print services, including Microsoft Universal Print and Pharos Cloud, covering deployment, secure print release, policies, access controls, reporting and management.
• Coordinate integration across identity, networking, endpoint management, security monitoring and print infrastructure.
• Lead technical testing, troubleshooting, defect resolution, performance validation and security assurance.
• Produce designs, configuration documentation, test plans, operational procedures and handover materials, and support pilots, rollouts and transitions to client support teams.

Required profile

• Preferred experience designing and implementing Windows 365 solutions in large enterprise environments.
• Experience integrating Windows 365 with Intune, Entra ID, Conditional Access and Defender for Endpoint.
• Experience implementing endpoint security in government or highly regulated environments.
• Experience delivering enterprise print solutions and supporting FIDO2, PIV and certificate-based authentication.
• Experience leading design, build, testing and transition work in Modern Workplace transformation programs.
• Australian citizenship required; security clearance is highly regarded.

Required skills

• Windows 365 and Cloud PC architecture and provisioning
• Microsoft Intune, Microsoft Entra ID and Conditional Access
• Microsoft Defender for Endpoint, EDR and Windows 11 endpoint security
• Microsoft Security Baselines, Attack Surface Reduction, BitLocker and device encryption
• FIDO2 and certificate-based authentication
• Microsoft Universal Print, Pharos Cloud and secure print management
• PowerShell and Microsoft Graph automation