Sr Lead, Infra End User Computing

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. Position : Sr Lead, Infra EUC The Sr.Lead Engineer, End User Computing is a senior technical role responsible for designing, implementing and continuously improving secure, resilient and user-centered endpoint services. The role supports Windows, macOS, mobile, browser, application-delivery and virtual workspace capabilities across a global, regulated enterprise. It combines hands-on engineering with architecture, automation, security, governance, documentation and technical leadership. The engineer will support the current hybrid environment while advancing the EUC roadmap toward Intune-centered governance, cloud-managed provisioning and servicing, modern application delivery, intelligent automation, unified reporting, stronger lifecycle controls and reduced reliance on legacy infrastructure and scripting. KEY RESPONSIBILITIES ·   Design and implement enterprise endpoint solutions across Windows, macOS, iOS, Android, Cloud PC, virtual workspaces and supported device-ownership models. ·   Engineer and maintain Microsoft Intune, Configuration Manager/SCCM, Windows Autopilot, Windows Autopatch, Windows Update for Business, Jamf, Active Directory, Microsoft Entra ID, Group Policy and related services. ·   Define target-state architectures, configuration baselines, deployment patterns, technical standards, test criteria, support models and operational acceptance requirements. ·   Lead device provisioning, enrollment, configuration, patching, operating-system upgrades, driver and firmware servicing, recovery, retirement and lifecycle cleanup. ·   Develop deployment-ring strategies, controlled pilots, success criteria, rollback plans, exception processes and evidence requirements for enterprise changes. ·   Translate security, risk, audit and regulatory requirements into enforceable endpoint controls, monitoring, remediation and audit-ready evidence. ·   Engineer capabilities supporting device compliance, encryption, least privilege, endpoint hardening, certificates, trust stores, application control, secure administration and vulnerability remediation. ·   Develop secure and supportable automation using PowerShell, Microsoft Graph, REST APIs, proactive remediations and approved workflow tools.