Sr/Lead Unified End-Point Management (UEM) Architect

Sr/Lead Unified End-Point Management (UEM) Architect

Company:

The Boeing Company

Boeing is seeking a Senior/Lead UEM Architect with deep Windows management expertise and hands-on experience with management tools such as Workspace ONE (Omnissa), MECM and Intune (Microsoft) to drive a secure, auditable, resilient endpoint management solution for aviation and defense environment.

This role will architect systems management driven Windows and Mobile lifecycle, hardening, telemetry, and automation solutions that meet stringent safety, security, and compliance requirements. The candidate will operate across unclassified, classified, air-gapped, and operational/flightline networks and collaborate closely with Safety, Security, Operations, and Engineering stakeholders.

This position is a Hybrid role that is mostly remote, but will require you to be available to go into a Boeing facility when needed. Preferred locations are St. Louis, MO, Seattle, WA, Charleston, SC, Mesa, AZ, or SoCal. Other Boeing locations will be considered.

The ideal candidate:

• Will lead activities to define requirements and design and verify robust architecture. Leads the identification of design constraints and ensures architecture conforms to requirements.
• Leads the development and configuration management of architecture views and models.
• Assesses of feasibility of architecture solutions and alternatives.
• Performs trade-off analyses.
• Evaluates products to assess suitability for integration into delivery system environments.
• Draft products and service standards.
• Assesses impact of architectural decisions to product lifecycle.
• Develops architecture standards and strategies. Coaches and mentors others.

Key Responsibilities

• Lead design and implementation of enterprise endpoint management centered on aerospace use-cases around desktop and mobile devices.

• Define provisioning and lifecycle processes tailored to constrained and controlled environments.

• Build and enforce hardened Windows baselines and security controls, including evolving towards next generation modern provisioning.

• Architect compartmentalized deployments and integrations for security standards ensuring strict data flow and labeling.

• Ensure endpoint telemetry monitoring for incident response, forensics, and audit evidence.

• Define standards and drive automation for policy deployments, application packaging, secure image builds, and emergency/rapid-response workflows using PowerShell, APIs, and approved orchestration tooling.

• Define operational runbooks, standard operating procedures, configuration baselines, and incident playbooks.

• Lead proof-of-concepts.

• Serve as escalation point for complex incidents and architecture queries.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or equivalent.

• 8+ years in endpoint management with 4+ years in architecture or senior engineering roles; 5+ years of modern endpoint management; substantial experience in Windows client lifecycle at large enterprise scale. (Tools: Workspace ONE, Intune, etc.)

• Hands-on experience implementing and operating the systems management toolset (policy design, automation, API integrations, reporting).  Windows, IOS, Android, Mac.

• Demonstrated experience managing endpoints within a highly regulated environment.

• Strong knowledge of Windows 10/11 management lifecycle: provisioning, patching/feature management, driver handling for specialized hardware, security hardening, and offline deployment strategies.

• Experience supporting air-gapped or disconnected environments.

• Willingness and ability to obtain and maintain government security clearance.

Preferred Qualifications

• 12+ years in endpoint management with 6+ years in architecture or senior engineering roles;

• Certifications:  Workspace One Certification and/or Microsoft Certified: Endpoint Administrator Associate, or specific systems management certifications.

• Prior experience migrating from legacy management (eg. SCCM, ConfigMgr) tooling to modern management solutions in restricted or accredited environments.

Behavioral & Leadership Skills

• Strong sense of accountability and risk-awareness in safety- and mission-critical contexts.

• Excellent documentation and stakeholder communication; experience producing artifacts for accreditation and auditors.

• Excellent cross-functional collaboration skills across Network, Enterprise Security, and Client computing teams.   

• Ability to translate regulatory and operational constraints into practical, auditable technical solutions.

• Mentorship mindset and capacity to upskill teammates.

• Alignment with Boeing’s Values and Behaviors.

Typical Tools & Technologies

• Primary: systems management  (configuration, automation, reporting, API integrations)

• Windows: Windows11, Autopilot alternatives for disconnected environments, PowerShell (advanced), MSIX/MSI packaging

• Legacy/Co-management: SCCM/ConfigMgr, offline imaging tools, media-based provisioning

• Identity & Access Management: Azure AD (where applicable), on-prem AD, PKI

• Operational: ITSM platforms, asset management, field device provisioning tools applicable and appropriate educational/certification credentials from an accredited institution and/or equivalent experience is required.

Drug Free Workplace:

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. 

General:

All information provided will be checked and may be verified.

Please apply ASAP for this role as recruitment may commence before the end date.

Relocation:

This position is not budgeted for relocation assistance. Candidates must live near a Boeing facility or relocate at their own expense.

Pay Transparency & Total Rewards:

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent.  Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.  

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.  

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

Salaries are based upon candidate experience and qualifications, as well as market and business considerations.

Salary Range:

High Cost of Living Area (SoCal, Seattle, Dallas, DC) - $187K - $235K

Mid Cost of Living Area (St. Louis) - $174K - $220K

Low Cost of Living Area (Montana) - $162K - $210K

Language Requirements:

Not Applicable

Education:

Bachelor's Degree or Equivalent

Relocation:

Relocation assistance is not a negotiable benefit for this position.

Export Control Requirement:

This is not an Export Control position.

Safety Sensitive:

This is not a Safety Sensitive Position.

Security Clearance:

This position does not require a Security Clearance.

Visa Sponsorship:

Employer will not sponsor applicants for employment visa status.

Contingent Upon Award Program

The position is contingent upon program award

Shift:

Shift 1 (United States of America)

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning