Windows 365, Endpoint Security & Print Technical Lead

Role Description

The Windows 365, Endpoint Security and Print Technical Lead is responsible for the detailed design, build, configuration, and validation of Windows 365, endpoint security, and enterprise print capabilities within the client environment.

The role provides technical leadership across Cloud PC provisioning, endpoint protection, secure access, device compliance, and print services. Working with the Modern Workplace Technical Architect, Intune Platform SME, SOE Engineer, identity, network, and security teams, the role ensures these capabilities are securely integrated with Microsoft Intune, Microsoft Entra ID, Microsoft Defender for Endpoint, Microsoft Universal Print, and Pharos Cloud.

Key Responsibilities

Lead the detailed design and implementation of Windows 365 and Cloud PC capabilities.

Configure Windows 365 provisioning policies, Azure network connections, device images, user assignments, and access controls.

Design connectivity and endpoint requirements for access to Windows 365 from approved Windows and thin-client devices.

Validate third-party thin-client compatibility with Windows 365, the Windows App, Intune, Entra ID, FIDO2/PIV authentication, peripherals, and client security controls.

Design and configure endpoint security policies using Microsoft Intune and Microsoft Defender for Endpoint.

Implement antivirus, firewall, attack surface reduction, endpoint detection and response, disk encryption, compliance, and device control policies.

Design and implement enterprise print services, including integration with Microsoft Universal Print and Pharos Cloud.

Configure printer deployment, secure print release, print policies, print access controls, reporting, and management capabilities.

Coordinate integration requirements across identity, networking, endpoint management, security monitoring, and print infrastructure.

Lead technical testing, troubleshooting, defect resolution, performance validation, and security assurance activities.

Produce detailed designs, configuration documentation, test plans, operational procedures, and handover materials.

Support pilot deployment, production rollout, operational readiness, and transition to client support teams.

Key Skills

Microsoft Windows 365 and Cloud PC

Windows 365 Enterprise Architecture and Provisioning

Microsoft Intune

Microsoft Entra ID and Conditional Access

Microsoft Defender for Endpoint

Windows 11 Endpoint Security

Endpoint Detection and Response (EDR)

Microsoft Security Baselines

Attack Surface Reduction (ASR)

BitLocker and Device Encryption

Device Compliance and Configuration Policies

FIDO2 and Certificate-Based Authentication

Windows App and Thin Client Integration

Enterprise Print Architecture

Microsoft Universal Print

Pharos Cloud

Secure Print Release and Print Management

Printer Deployment and Driver Management

Network, Identity and Security Integration

PowerShell and Microsoft Graph Automation

Technical Troubleshooting and Solution Design

.

Preferred Experience

Designing and implementing Windows 365 solutions within large enterprise environments.

Integrating Windows 365 with Microsoft Intune, Microsoft Entra ID, Conditional Access, and Microsoft Defender for Endpoint.

Implementing endpoint security controls in government or highly regulated environments.

Designing secure access models for Cloud PCs from Windows endpoints and third-party thin-client devices.

Delivering enterprise print solutions using Microsoft Universal Print, Pharos Cloud, and secure print management platforms.

Supporting FIDO2, PIV, certificate-based authentication, and phishing-resistant authentication scenarios.

Leading complex design, build, testing, and transition activities across Modern Workplace transformation programs.

You must be an Australian citizen to apply; security clearance is highly regarded.

.