Role Description 

The Windows 365, Endpoint Security and Print Technical Lead is responsible for the detailed design, build, configuration, and validation of Windows 365, endpoint security, and enterprise print capabilities within the client environment. 

The role provides technical leadership across Cloud PC provisioning, endpoint protection, secure access, device compliance, and print services. Working with the Modern Workplace Technical Architect, Intune Platform SME, SOE Engineer, identity, network, and security teams, the role ensures these capabilities are securely integrated with Microsoft Intune, Microsoft Entra ID, Microsoft Defender for Endpoint, Microsoft Universal Print, and Pharos Cloud. 

Key Responsibilities 

• Lead the detailed design and implementation of Windows 365 and Cloud PC capabilities. 

• Configure Windows 365 provisioning policies, Azure network connections, device images, user assignments, and access controls. 

• Design connectivity and endpoint requirements for access to Windows 365 from approved Windows and thin-client devices. 

• Validate third-party thin-client compatibility with Windows 365, the Windows App, Intune, Entra ID, FIDO2/PIV authentication, peripherals, and client security controls. 

• Design and configure endpoint security policies using Microsoft Intune and Microsoft Defender for Endpoint. 

• Implement antivirus, firewall, attack surface reduction, endpoint detection and response, disk encryption, compliance, and device control policies. 

• Design and implement enterprise print services, including integration with Microsoft Universal Print and Pharos Cloud. 

• Configure printer deployment, secure print release, print policies, print access controls, reporting, and management capabilities. 

• Coordinate integration requirements across identity, networking, endpoint management, security monitoring, and print infrastructure. 

• Lead technical testing, troubleshooting, defect resolution, performance validation, and security assurance activities. 

• Produce detailed designs, configuration documentation, test plans, operational procedures, and handover materials. 

• Support pilot deployment, production rollout, operational readiness, and transition to client support teams. 

Key Skills 

• Microsoft Windows 365 and Cloud PC 

• Windows 365 Enterprise Architecture and Provisioning 

• Microsoft Intune 

• Microsoft Entra ID and Conditional Access 

• Microsoft Defender for Endpoint 

• Windows 11 Endpoint Security 

• Endpoint Detection and Response (EDR) 

• Microsoft Security Baselines 

• Attack Surface Reduction (ASR) 

• BitLocker and Device Encryption 

• Device Compliance and Configuration Policies 

• FIDO2 and Certificate-Based Authentication 

• Windows App and Thin Client Integration 

• Enterprise Print Architecture 

• Microsoft Universal Print 

• Pharos Cloud 

• Secure Print Release and Print Management 

• Printer Deployment and Driver Management 

• Network, Identity and Security Integration 

• PowerShell and Microsoft Graph Automation 

• Technical Troubleshooting and Solution Design

.

Preferred Experience 

• Designing and implementing Windows 365 solutions within large enterprise environments. 

• Integrating Windows 365 with Microsoft Intune, Microsoft Entra ID, Conditional Access, and Microsoft Defender for Endpoint. 

• Implementing endpoint security controls in government or highly regulated environments. 

• Designing secure access models for Cloud PCs from Windows endpoints and third-party thin-client devices. 

• Delivering enterprise print solutions using Microsoft Universal Print, Pharos Cloud, and secure print management platforms. 

• Supporting FIDO2, PIV, certificate-based authentication, and phishing-resistant authentication scenarios. 

• Leading complex design, build, testing, and transition activities across Modern Workplace transformation programs. 

You must be an Australian citizen to apply; security clearance is highly regarded.

.