Lead Endpoint Engineering Architect

Job not on LinkedIn

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $195k - $210k / year

⏰ Full Time

🟠 Senior

🖥 Software Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Iovance Biotherapeutics, Inc.

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2014

🏥 Healthcare

🧬 Biotechnology

💊 Pharmaceuticals

Healthcare • Biotechnology • Pharmaceuticals

Iovance Biotherapeutics, Inc. is pioneering a transformational approach to treating cancer by harnessing the human immune system's ability to recognize and attack diverse cancer cells in each patient. The company focuses on T-cell-based immunotherapy, specifically Tumor Infiltrating Lymphocyte (TIL) therapy, which involves reinvigorating a patient’s TILs to fight cancer. Iovance's TIL therapy is being investigated in clinical trials across multiple advanced solid tumor cancers. Additionally, the company is advancing genetically modified TIL therapies and exploring potential applications of PBL (peripheral blood lymphocyte) therapy for blood cancers. As a leader in cell therapy, Iovance owns a state-of-the-art Cell Therapy Center in Philadelphia for manufacturing their therapies using proprietary GMP. The company is at the forefront of developing personalized and patient-specific cancer treatments.

📋 Description

• Own the end-to-end design and implementation of Iovance’s Intune and Autopilot environment • Build Autopilot provisioning workflows for fully configured factory-sealed laptops • Create layered Intune configuration profiles, security baselines, role-specific profiles, and exception policies • Set up Windows Update for Business ring management • Design and own Win32 application deployment using dependencies, detection rules, supersedence, and testing • Build Proactive Remediations for network drives, configuration drift, and application health issues • Establish laptop performance baselines and remediation workflows using Intune Proactive Remediations, Endpoint Analytics, and Windows performance counters • Implement endpoint compliance policies and Conditional Access rules with IT Security • Write architecture diagrams, runbooks, packaging standards, and troubleshooting guides • Train and mentor deskside and help desk staff on Intune operations and escalation • Evaluate endpoint management tools, including OEM driver management solutions • Design, build, and maintain SharePoint Online sites, libraries, and lists • Configure SharePoint permissions, access controls, governance, lifecycle, archival, and troubleshooting • Develop and maintain Power Automate flows for approvals, notifications, document routing, and data collection • Integrate Power Automate with SharePoint, Microsoft Forms, and other Microsoft 365 services • Monitor, troubleshoot, optimize, and document automated workflows • Create and manage Microsoft Forms for internal data collection, surveys, and intake processes • Perform miscellaneous duties as assigned

🎯 Requirements

• 8+ years in enterprise IT, with at least 4–5 years spent deep in Intune, Autopilot, Entra ID, Conditional Access, and Windows Update for Business • Experience architecting and operating an Intune environment managing 1,000+ devices • Strong production-level PowerShell skills for unattended automation across hundreds of devices • Experience with Intune Proactive Remediations, device configuration scripts, and reporting • Experience packaging Win32 applications for Intune, including silent installs, detection rules, dependency chains, and supersedence • Solid understanding of Entra ID dynamic groups and Conditional Access policy design • Experience managing drivers across mixed hardware fleets using OEM tools or Windows Update for Business driver management • Experience working in a regulated industry such as pharma, biotech, medical device, or financial services • Experience working across IT, security, quality, and business teams • Experience documenting and writing runbooks • Ability to remain stationary for extended periods and move within an office or remote workspace while occasionally exerting up to 10 pounds of force • Visual acuity for data analysis, computer screens, and extensive reading • Repetitive wrist, hand, and/or finger motion • Ability to communicate effectively and perform analytical, conceptual, and problem-solving activities • Clear conceptual thinking, judgment, troubleshooting, analysis, discretion, stress management, prioritization, urgency, and deadline management • Microsoft Certified: Endpoint Administrator Associate (MD-102) or equivalent is preferred • Bachelor’s degree in a related field is preferred • Must adhere to Iovance Biotherapeutics’ core values, policies, procedures, and business ethics