Architect / Senior Consultant (m/f/d) Microsoft Modern Workplace

For our public sector client, we are seeking an Architect / Senior Consultant (m/f/d) with a strong focus on Microsoft Modern Workplace. In this role, you will assume overall technical responsibility for the architecture and future-proof development of a complex endpoint management platform. With a focus on Microsoft Intune, Entra ID, and Microsoft Security, you will combine strategic planning with sound technical leadership skills. The role comprises approximately 60% architecture and project work, and approximately 40% further development of the existing operational environment. Architecture & Vision: You will design the modern workplace target state and establish Windows Autopilot and Windows 11 as the standard. Lead & Governance: You will set the technical direction, define standards, and oversee rollouts with a clear focus on quality and security. Code instead of clicks: You will automate recurring processes using PowerShell and the Microsoft Graph API. Sparring partner: You advise our clients on an equal footing, moderate architecture workshops and take over the technical management for complex 3rd-level issues.

• Track Record: Several years of senior experience in the design, management and further development of Microsoft Modern Workplace environments.

• Tech stack: Solid knowledge of Microsoft Intune, modern enterprise endpoint management, and Microsoft Entra ID.

• OS & Deployment: Extensive practical experience with Windows 11 and zero-touch rollouts via Windows Autopilot.

• Automation: Very good PowerShell skills for automating and standardizing processes.

• Documentation & Control: Proven experience in creating architectural concepts, technical designs and operational documentation for complex customer environments.

• Communication: Fluent German skills, customer focus and the ability to act as a technical lead.

Nice to have

• Scalability & Environment: Experience with large fleets (> 5,000 Windows endpoints) as well as practical experience in the public sector or regulated environments.

• Security & Compliance: Expertise in Microsoft Defender for Endpoint (P1/P2), Conditional Access, WDAC, and familiarity with BSI basic protection or CIS benchmarks.

• Tooling: Experience with Microsoft Graph API, PSADT, software packaging and software deployment.

• Certifications & Frameworks: Microsoft certificates (e.g. MD-102, SC-300, SC-100, AZ-500) or ITIL/COBIT knowledge.

• Security clearance: Willingness to undergo a security clearance level 1 or 2.