IT Architect, End User Computing (EUC)

Work Location: ​Chicago​

Due to the highly interactive and team-based nature of this role, in-person attendance for most of the workweek (i.e., 3 days or more) is essential for: effective communication including during in-person meetings, strong supervision, real-time problem-solving, and participation in cross-functional initiatives.

Want to make an impact?

Technology powers Ferrara’s transformation of iconic brands into a world-class global business. Following a successful S/4HANA go-live, our IT organization is leading the next phase of digital evolution—scaling platforms, advancing data and analytics, and partnering closely with the business to deliver measurable impact. This is a chance to join a highly innovative IT team with strong executive sponsorship and influence across the enterprise.

The IT Architect, EUC is responsible for defining, designing, and governing the enterprise digital workplace and endpoint ecosystem. This role spans modern device management, collaboration platforms, virtual desktop solutions, endpoint security, and end-user experience optimization. The architect sets long-term vision and architecture for all endpoints – Windows, mobile, virtual – and ensures employees have secure, reliable, and productive tools to perform their jobs across hybrid and distributed environments.

Ways you will make a difference

EUC & Endpoint Architecture

• Architect end-to-end EUC and endpoint solutions across Windows, iOS, Android, and virtual desktops (VDI).


• Develop and maintain enterprise EUC / endpoint architecture, standards, patterns, and roadmaps.


• Design solutions leveraging:
  
  
  
  • Microsoft Endpoint Manager (Microsoft Intune)
  
  
  • MDM/MAM platforms
  
  
  • Autopilot and zero-touch deployment
  
  
  • Application packaging and delivery frameworks
  
  
  • Apple Business Manager integration
  
  
  
  


• Create detailed architectural documentation, technical diagrams, and design authority materials.

Digital Workplace Strategy & Modernization 

• Define the digital workplace and endpoint strategy supporting hybrid work, device flexibility, and cloud-first initiatives.


• Lead modernization projects such as cloud-managed endpoints, co-management to Intune, and zero-touch provisioning.


• Evaluate emerging workplace technologies (AI-driven productivity tools, digital assistants, experience monitoring).


• Ensure EUC architecture enhances productivity, collaboration, and employee experience.

Collaboration & Productivity Platforms

• Architect and optimize Microsoft365 platforms including Teams, Exchange Online, SharePoint, OneDrive, and security/compliance tools.


• Establish governance, lifecycle, and adoption frameworks for collaboration tools and communications workflows.


• Work with business teams to promote effective use of collaboration technologies.

Security, Compliance & Zero Trust

• Design endpoint and EUC solutions aligned with Zero Trust principles.


• Partner with Cybersecurity to implement:
  
  
  
  • Conditional Access
  
  
  • EDR/XDR (Defender, CrowdStrike, etc.)
  
  
  • Hardening baselines (CIS, NIST, Microsoft Baselines)
  
  
  • Device encryption, DLP, and data protection
  
  
  
  


• Ensure all EUC systems meet regulatory, audit, and enterprise compliance requirements.

Virtual Desktop & Application Delivery

• Design and support VDI and virtual app delivery architectures:
  
  
  
  • Azure Virtual Desktop (AVD)
  
  
  • Windows 365
  
  
  
  


• Define packaging, deployment, lifecycle, and performance standards for enterprise applications.

Automation, Monitoring & Optimization

• Develop automation for device provisioning, configuration, patching, and application deployment using PowerShell, APIs, and scripts.


• Implement device health, experience analytics, and proactive monitoring using tools like Endpoint Analytics, Nexthink, or SysTrack.


• Identify opportunities to improve device stability, performance, and user satisfaction using data insights.

Lifecycle Management & Standardization

• Define standardized device hardware catalogs, OS images, configuration profiles, and patching methodologies.


• 
  

  Manage end-to-end lifecycle processes: model selection, procurement, provisioning, maintenance, refresh, and decommissioning.

  
  


• 
  

  Collaborate with vendors to evaluate new devices, services, and EUC-enhancing technologies.

  
  

Technical Leadership & Collaboration

• Act as the enterprise subject matter expert for EUC and endpoint architecture.


• Lead design workshops, pilots, proof-of-concepts, and global rollouts.


• Guide EUC engineers and administrators, cybersecurity teams, and IT operations personnel with architectural oversight.


• Communicate architecture recommendations, trade-offs, and risks to senior leadership and cross-functional teams.


• Conduct user research and feedback loops to continuously enhance digital workplace capabilities.

Skills that will make you successful

• EUC Technology Expertise – Deep knowledge of desktop, virtualization (VDI), endpoint management, collaboration tools, and mobile device solutions.


• Solution Design & Optimization – Ability to design scalable, secure, and user-friendly EUC environments aligned with business needs.


• Security & Compliance Awareness – Ensures endpoints and user environments meet security standards, policies, and regulatory requirements.


• Strategic Vision & Business Alignment – Aligns EUC strategies with enterprise goals and enhances end-user productivity.


• Collaboration & Communication – Works closely with IT teams, business units, and vendors, clearly translating technical concepts for stakeholders

Experiences that will support your success

Required Qualifications

• Bachelor’s degree in IT, Computer Science, Engineering, or equivalent experience.


• 5+ years of experience in End User Computing, endpoint management, systems engineering, or digital workplace roles.


• Deep expertise with:
  
  
  
  • Microsoft Intune / MECM / Endpoint Management
  
  
  • Windows 10/11, iOS device management
  
  
  • VDI solutions (AVD, Citrix, VMware Horizon)
  
  
  • Microsoft365 collaboration suite
  
  
  • Scripting and automation (PowerShell, APIs, JSON, Graph API)
  
  
  • Endpoint security frameworks and EDR/XDR tools
  
  
  
  


• Strong understanding of Azure AD/Entra ID, identity governance, conditional access, and Zero Trust principles.

Preferred Qualifications

• Microsoft certifications such as:
  
  
  
  • Microsoft 365 Enterprise Administrator Expert
  
  
  • Endpoint Administrator Associate
  
  
  • Azure Security Engineer Associate
  
  
  
  


• Experience with application packaging (Win32 apps, MSIX, App-V).


• Experience in global enterprise environments with 3,000+ endpoints.


• Familiarity with experience monitoring tools (Nexthink, SysTrack, Endpoint Analytics).


• Knowledge of regulatory frameworks (ISO 27001, NIST, CIS, GDPR).

What We Offer

At Ferrara, we’re proud to support our employees by providing comprehensive benefits such as health insurance, dental insurance, a 401(k), and paid time off (PTO).  Eligible employees may also receive an annual bonus based on company performance. Learn more about our benefits at https://flimp.live/Ferrara-Candy-2025-OE-QR

Compensation

The salary range for this role is $112,278 - $157,189 annually.