Enterprise Desktop Architect

Job DescriptionBessemer Trust is seeking an experienced Enterprise Desktop Architect to join our Desktop Engineering team. This senior, hands-on technical role is responsible for defining and continuously evolving the firm's endpoint computing architecture across physical desktops, laptops, virtual desktops, and modern endpoint management platforms.The successful candidate will combine deep technical expertise with architectural vision and strong engineering judgment. This individual will challenge established practices, evaluate emerging technologies, and define an endpoint standard optimized for performance, reliability, security, supportability, and end-user experience.The role requires the ability to work closely with Information Security and other technology teams to understand risk, quantify the operational and performance impact of security controls, and recommend solutions that provide the appropriate balance between security and functionality.This position is based in our Woodbridge, NJ office with a hybrid schedule of three days in the office and two days remote each week.Primary ResponsibilitiesEndpoint Strategy & ArchitectureDefine and maintain the firm's enterprise endpoint architecture and technology roadmap across desktops, laptops, VDI, endpoint management, identity integration, and application delivery.Establish and continuously reassess the enterprise desktop standard rather than accepting existing technologies, configurations, or practices by default.Design, build, and optimize Windows 11 and endpoint configurations for performance, stability, reliability, security, and user experience.Evaluate endpoint hardware, software, security technologies, management platforms, and emerging capabilities through technical analysis, benchmarking, proof-of-concepts, and pilots.Define standards for provisioning, configuration management, patching, compliance, endpoint lifecycle management, and automation.Drive adoption of automated application packaging, deployment, patching, and lifecycle management using Tanium and other endpoint-management technologies, reducing reliance on manual deployment processes.Translate business and technical requirements into scalable, supportable enterprise solutions.Security, Performance & User ExperiencePartner with Information Security to evaluate endpoint security technologies, configurations, and controls.Assess security controls in the context of risk reduction, endpoint performance, usability, operational complexity, and supportability, and recommend appropriate trade-offs.Implement and mature Digital Employee Experience (DEX) and endpoint analytics capabilities, defining meaningful technical and user-experience metrics, baselines, and service-level objectives.Use endpoint telemetry, performance testing, DEX metrics, and operational data to proactively identify performance degradation, recurring issues, and opportunities for improvement.Provide hands-on architectural leadership for complex endpoint incidents and drive root-cause analysis and permanent corrective actions.Develop automation and engineering solutions that improve consistency, reliability, and operational efficiency.Technical LeadershipServe as the senior technical authority and hands-on technical escalation point for Desktop Engineering.Challenge legacy approaches and drive adoption of modern engineering practices and technologies where they provide measurable benefit.Establish engineering, testing, deployment, documentation, and configuration standards.Mentor engineers and provide technical leadership for complex or high-impact initiatives.Partner across Information Security, Identity, Networking, Infrastructure, Application Delivery, Desktop Support, and other technology teams.Evaluate vendor solutions and provide technical recommendations for technology selection and strategic investments.Microsoft 365 - Desired ExperienceMicrosoft 365 administration experience is desirable but secondary to endpoint architecture responsibilities. Relevant experience includes Microsoft Purview policy and governance, Microsoft 365 Apps configuration and deployment, SharePoint Online external-sharing controls, Entra ID and Conditional Access, and integration with security, monitoring, compliance, and endpoint-management platforms.Qualifications8+ years of experience in Desktop Engineering, Endpoint Engineering, Workplace Technology, Infrastructure Engineering, or a related discipline.Demonstrated experience functioning as a senior engineer, technical lead, or enterprise endpoint architect within a large organization.Demonstrated ability to develop endpoint architecture and technology strategy and successfully challenge existing designs, technologies, and operational practices.Advanced hands-on knowledge of Windows 11 Enterprise architecture, configuration, optimization, deployment, and troubleshooting.Strong experience with Microsoft Intune and modern endpoint management.Strong knowledge of Microsoft Entra ID, Active Directory, Group Policy, Conditional Access, and identity/device-management concepts.Experience with Tanium or comparable endpoint-management platforms, including application deployment, patching, automation, and endpoint telemetry.Experience with DEX, endpoint analytics, performance monitoring, benchmarking, and defining measurable endpoint experience and performance metrics.Strong PowerShell scripting and automation skills.Experience with enterprise endpoint security technologies and understanding their impact on endpoint performance and user experience.Experience with virtual desktop technologies such as Citrix Virtual Apps and Desktops/DaaS, VMware Horizon, Azure Virtual Desktop, FSLogix, or similar platforms.Experience supporting large-scale enterprise endpoint environments.Experience in financial services or another highly regulated environment is preferred.The successful candidate will demonstrate strong architectural and systems thinking, intellectual curiosity, sound technical judgment, excellent troubleshooting abilities, and the confidence to challenge established practices and advocate for better solutions.The base salary range for this position is $140,000 - $180,000 per year. This range reflects the minimum and maximum base salary we reasonably expect to pay for this role. In addition, this position may be eligible to participate in the relevant business unit’s incentive compensation plan, and other compensation programs as applicable. Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution, medical, prescription dental, and vision coverage; life insurance; disability coverage; paid holidays; vacation; and sick time, subject to plan terms and Company policies.About Bessemer TrustBessemer Trust is a family office, overseeing more than $250 billion in assets for over 3,000 individuals and families of substantial wealth. Its more than 1,300 employees are singularly focused on private wealth management — disciplined investment management, sophisticated wealth planning, comprehensive family office services, and highly personalized client service.Established in 1907 as the family office for Annie and Henry Phipps, Bessemer Trust is in its seventh generation of ownership by the Phipps family. As a self-made entrepreneur, Henry Phipps was a founding partner and chief financial officer of Carnegie Steel.Bessemer Trust retains its original focus as a privately owned and independent wealth manager deeply committed to its mission of providing peace of mind to its clients. Bessemer’s adherence to putting clients’ interests first, fiduciary mindset, and highly collaborative culture are at the heart of everything the firm does.Key Facts:For 119 years, Bessemer Trust has operated continuously in a single line of business, independently owned by one family.Headquartered in New York’s Rockefeller Center, Bessemer Trust has 22 offices in total. Woodbridge, NJ, is one of the firm’s largest offices, which hosts a wide range of technology and operations professionals. In addition to its sizable presence in New York and Woodbridge, the firm provides client service through offices in Atlanta, Boston, Chicago, Dallas, Delaware, Denver, Garden City, Grand Cayman, Greenwich, Houston, Los Angeles, Miami, Naples, Nevada, Palm Beach, San Diego, San Francisco, Seattle, Stuart, and Washington, D.C.To watch a video about Bessemer Trust’s history, click here.To learn more about Bessemer Trust, click here.About Our Employee Rewards and Benefits:We provide exceptional rewards and benefits that are among the best in the industry, giving our people access to a wide range of options, including:Competitive base salary plus discretionary annual bonus for select positionsA 401(k) plan with a generous annual profit-sharing contributionPersonalized development and career opportunities, including tuition reimbursement supportComprehensive medical, dental, and vision plans with zero contributions for employee coverageEmployee assistance (EAP) and wellness programsHybrid work environment: 60% in office, 40% remote for most positionsPaid time off and paid parental leaveEmployer-paid life insurance and short- and long-term disability coverageLegal services and financial wellness plans at no cost to employeesBessemer Trust is committed to creating a diverse and inclusive environment and is proud to be an equal opportunity employer. We encourage candidates of diverse backgrounds to apply.Job DetailsJob Type: Full-timeCategory: Information TechnologySalaried: Salaried