Position: Windows 365 Cloud PC Architect
Location: Toronto
Mode of Work: Hybrid (3 Days a week)
This job posting is for an existing, active vacancy and we are looking to hire a Windows 365 Cloud PC Architect.
Summary:
We are looking for a Windows 365 Cloud PC Architect who will define and evolve the enterprise reference architecture and landing zone for Cloud PC, ensuring secure, resilient, and repeatable deployment patterns at global scale. The role focuses on establishing opinionated architectural standards across identity, networking, security, image lifecycle, observability, and operational readiness. The Architect will enable Cloud PC as a core component of the enterprise digital workspace ecosystem, delivering consistency in user experience, regulatory alignment, scalability, and cost efficiency through automation-driven lifecycle management and a forward-looking platform roadmap.
Roles & Responsibilities:
Design and maintain the enterprise Cloud PC reference architecture and landing zone, including identity boundaries, network topology, security guardrails, image standards, and operational readiness requirements.
Define and operate the Cloud PC image factory, including versioning, automated validation, blue–green promotion, performance baselines, and rollback criteria.
Establish reusable identity, access, and security patterns using Entra ID, Conditional Access, RBAC, and Just-In-Time privilege principles for multiple personas.
Develop an observability model with measurable service level objectives (SLOs) for user experience, provisioning reliability, and service health, including dashboards, alerts, and runbooks.
Integrate Cloud PC with enterprise ITSM and CMDB processes, including change control templates, configuration items, and operational playbooks.
Define a pragmatic user profile strategy leveraging OneDrive Known Folder Move while documenting exceptions such as FSLogix.
Drive FinOps practices through cost modeling, forecasting, SKU optimization, and usage efficiency improvements.
Develop resilience and continuity patterns including failover, data residency compliance, and recovery validation.
Enable enterprise use cases such as privileged workstations, developer environments, contractor onboarding, seasonal scaling, M&A integration, and GPU workloads.
Collaborate with engineering, security, compliance, and business teams to align Cloud PC strategy with enterprise modernization initiatives.
Qualifications & Skills :
Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent practical experience.
Strong experience in enterprise architecture across identity, endpoint management, virtualization, and automation.
Expertise in building and governing reference architectures, landing zones, and image lifecycle frameworks.
Hands-on experience with Windows 365, Intune, Entra ID, Azure Monitor, and automation pipelines.
Strong knowledge of observability, ITSM integration, CMDB governance, and FinOps practices.
Proven ability to translate business and compliance requirements into scalable, secure Cloud PC or VDI solutions.
Experience in large-scale enterprise environments with endpoint lifecycle management.
Strong documentation and communication skills with ability to produce architectural standards and roadmaps.
Certifications (Expected / Value-Added):
Microsoft 365 Certified: Fundamentals (MS-900)
MD-102: Endpoint Administrator
AZ-305: Azure Solutions Architect Expert
TOGAF 9
SC-900: Security, Compliance, and Identity Fundamentals
AZ-104: Azure Administrator Associate
SC-300: Identity and Access Administrator
AZ-140: Azure Virtual Desktop
Experience:
Minimum 5+ years in enterprise endpoint management
3+ years with Intune and Entra ID
2+ years with Windows 365 Cloud PCs
Preferred 5–7 years in large-scale environments (10,000+ endpoints)
Experience with Azure Monitor, Log Analytics, ServiceNow/Jira, and CMDB
Strong exposure to FinOps, licensing optimization, and consumption analytics
