[Hiring] Lead Endpoint Engineering Architect @Iovance Biotherapeutics

Role Description

The Lead Endpoint Engineering Architect will own the architecture and build-out of Iovance’s endpoint management platform, covering roughly 1,000 Windows devices across corporate, lab, and field locations. This role exists to design a modern, reliable endpoint platform on Microsoft Intune, Autopilot, and Entra ID, build it, document it, and hand off day-to-day operations to the existing support team with clear runbooks. This is a hands-on technical role, not a management role. The Lead Endpoint Engineering Architect will partner with IT Security, Quality Assurance, and business stakeholders across the company, but the core of the job is engineering work: designing configurations, packaging applications, writing PowerShell, testing deployments, and solving problems.

Essential Functions and Responsibilities

• Own the design and implementation of our Intune and Autopilot environment end-to-end: enrollment profiles, configuration profile architecture, compliance policies, Conditional Access, and update ring strategy.
• Build Autopilot provisioning workflows that let us ship a factory-sealed laptop to any employee and have it arrive fully configured without a technician touching it.
• Create a layered configuration profile structure in Intune: security baselines that apply to everything, role-specific profiles for different groups, and exception policies where needed.
• Set up Windows Update for Business with proper ring management so updates deploy in controlled phases.
• Design and own application deployment approach using Intune’s Win32 packaging model.
• Build Proactive Remediations that detect and auto-fix common problems like dropped network drives, configuration drift, and application health issues.
• Establish and maintain laptop performance baselines and remediation workflows.
• Work with IT Security to implement compliance policies and Conditional Access rules.
• Write and maintain the documentation that makes this platform operable by others on the team.
• Train and mentor our deskside and help desk staff on Intune operations.
• Evaluate endpoint management tools and technologies as needed.
• Design, build, and maintain SharePoint Online sites, libraries, and lists that support departmental workflows.
• Develop and maintain Power Automate flows to automate business processes.
• Create and manage Microsoft Forms for internal data collection, surveys, and intake processes.
• Must adhere to Iovance Biotherapeutics’ core values, policies, procedures, and business ethics.
• Perform miscellaneous duties as assigned.

Qualifications

• 8+ years in enterprise IT, with at least 4–5 of those years spent deep in Intune, Autopilot, Entra ID, Conditional Access, and Windows Update for Business.
• Experience architecting and operating an Intune environment managing 1,000+ devices.
• Strong PowerShell skills at a production-automation level.
• Real experience packaging Win32 applications for Intune.
• Solid understanding of Entra ID dynamic groups, Conditional Access policy design.
• Experience managing drivers across a mixed hardware fleet using OEM tools.
• Experience working in a regulated industry such as pharma, biotech, medical device, or financial services.
• Experience working across IT, security, quality, and business teams.
• Experience documenting and writing runbooks for others to follow.

Preferred Education, Skills, and Knowledge

• Microsoft Certified: Endpoint Administrator Associate (MD-102) or equivalent.
• Experience migrating from SCCM/MECM to Intune.
• Familiarity with how endpoint changes map to validation and qualification requirements in regulated environments.
• Working knowledge of Microsoft 365 E3/E5 licensing.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.

Physical Demands and Activities Required

• Ability to remain in a stationary position for extended periods.
• Ability to move about within an office or remote workspace and exert up to 10 pounds of force occasionally.
• Visual acuity sufficient for preparing and analyzing data, viewing computer screens, and extensive reading.
• Repetitive motion involving wrists, hands, and/or fingers.
• Ability to communicate effectively to exchange information.
• Ability to engage in analytical, conceptual, and problem-solving activities.

Work Environment

This job operates in a professional or remote office environment and requires operating standard office equipment and keyboards.

Pay Transparency

The annual base salary we reasonably expect to pay is listed. Individual pay decisions depend on various factors, such as primary work location, complexity and responsibility of the role, job duties/requirements, and relevant education, experience and skills.

$195,000 — $210,000 USD

Equal Opportunity Employer

Iovance is committed to cultivating and offering a diverse and inclusive work environment. As an equal-opportunity employer, our employees and applicants will be considered without regard to an individual’s race, color, religion, sex, pregnancy, national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information, military and veteran status, and any other characteristic protected by applicable law.