Digital Workplace Architect

Avenga is an international engineering firm helping businesses operate with AI at the core. With 6,000+ experts worldwide, we combine engineering expertise with AI-native thinking to turn ambitious ideas into real-world impact across industries, technologies, and markets.

At the core of the role

We are looking for a Digital Workplace Architect to own the enterprise-wide Digital Workplace target architecture for a leading European telecom operator. You will define the strategy, principles, standards, reference architectures and modernization roadmap for end-user computing, endpoint management, Microsoft 365 collaboration, virtual desktops and application delivery across Windows, macOS and cloud-native platforms.

You will be the main architectural authority for the domain. That means turning business, employee and security needs into practical target architectures and investment priorities, and cutting complexity, risk and total cost of ownership along the way. You’ll work closely with Enterprise Architecture, Security, Identity, Networks, Cloud, Operations, People teams and vendors to deliver a secure, resilient and consistent employee experience in a hybrid environment.

What you will do:

• Define and evolve the Digital Workplace strategy, target-state architecture and transition roadmaps, covering cloud adoption, platform rationalization, legacy decommissioning and sustainable device lifecycle management
• Design architecture patterns and guardrails for workplace devices, endpoint management, M365 productivity and collaboration, application delivery, VDI/DaaS, meeting-room technology and service integration
• Act as design authority: review solution designs, assess deviations, record architecture decisions and guide solution architects and engineering teams through delivery
• Embed Zero Trust, data protection, compliance, accessibility and resilience-by-design into every workplace service
• Drive a standard-first, fit-to-standard approach, using Microsoft and vendor capabilities before anyone builds something custom
• Lead the responsible adoption of AI in the workplace (e.g. Microsoft 365 Copilot), including governance, data readiness and security
• Use experience and operational data (DEX telemetry, incident trends) to reduce friction, recurring incidents and technical debt
• Contribute to business cases and investment decisions, and explain architecture clearly to executives and non-technical stakeholders
• Mentor architects and engineers, and negotiate with vendors and partner domains

Core skills you’ll bring

• 10+ years in Digital Workplace, end-user computing, enterprise architecture or workplace technology leadership; a Bachelor’s degree in IT, Computer Science or a related field
• Deep expertise in Microsoft Intune and modern endpoint management: Windows Autopilot, compliance and configuration policies, app deployment, co-management with MECM/SCCM
• Strong Microsoft 365 architecture knowledge across Exchange Online, Teams (including Teams Rooms), SharePoint Online and OneDrive, plus tenant governance
• Solid Microsoft Entra ID experience: Conditional Access, identity protection, hybrid identity and device-based access
• Hands-on knowledge of Zero Trust security for the workplace: Microsoft Defender for Endpoint, Microsoft Purview (DLP, Information Protection, compliance) and secure access in hybrid/cloud environments
• Experience with virtual desktop and application delivery: Azure Virtual Desktop, Windows 365, Citrix or Omnissa Horizon, and app packaging (MSIX, Win32)
• macOS management in the enterprise (Intune for macOS and/or Jamf)
• Ability to define target operating models, lifecycle management, service reliability and supportability standards
• Excellent communication, documentation and stakeholder management skills, with a proven ability to influence without direct authority
• Fluent English

Nice-to-have

• Telco industry experience (highly desired)
• Microsoft 365 Copilot rollout and AI governance experience
• Digital Employee Experience (DEX) platforms such as Nexthink or 1E
• Automation with PowerShell and Microsoft Graph API
• ITSM integration (ServiceNow) and self-service enablement
• SASE/SSE solutions (e.g., Zscaler, Netskope) and network-aware workplace design
• Architecture frameworks (TOGAF) and certifications such as Microsoft Certified: Cybersecurity Architect Expert, Endpoint Administrator Associate or Enterprise Administrator Expert

People are at the core of Avenga. We provide equal opportunities regardless of race, ethnicity, gender identity, sexual orientation, disability, age, religion, or any other characteristic. We are committed to a respectful environment where everyone can be themselves, share their ideas, and feel that they belong.