Job description

MACOM designs and manufactures semiconductor products for Data Center, Telecommunication, and Industrial and Defense applications. Headquartered in Lowell, Massachusetts, MACOM has design centers and sales offices throughout North America, Europe, and Asia. MACOM is certified to the ISO9001 international quality standard and ISO14001 environmental management standard. MACOM has more than 75 years of application expertise with multiple design centers, Si, GaAs, and InP fabrication, manufacturing, assembly and test, and operational facilities throughout North America, Europe, and Asia. Click here to view our facilities. macom.com . In addition, MACOM offers foundry services that represents a key core competency within our business. MACOM sells and distributes products globally via a sales channel comprised of a direct field sales force, authorized sales representatives, and leading industry distributors. Our sales team is trained across all of our products to give our customers insights into our entire portfolio. The Principal Endpoint Architect is responsible for the design, deployment, configuration, and ongoing health of MACOM's global endpoint estate, including physical workstations, shared devices, virtual desktops, servers and other devices. This role sits within the End User Support team and owns the full lifecycle of endpoint management tooling — Microsoft Intune, SCCM, Azure Virtual Desktop (AVD), PDQ, Group Policy, ServiceNow, etc.— ensuring devices are secure, compliant, patched, and performing well for the global user base. Key Responsibilities • Own global endpoint controls for encryption, local admin strategy, device control, conditional access readiness, and compliance reporting. • Establish device build standards, hardening baselines, and lifecycle policies. • Design, implement, and manage Intune configuration profiles and compliance policies across physical and virtual endpoints. • Administer the enterprise application catalog, including AppLocker and WDAC policy enforcement. • Lead cloud endpoint transformation initiatives, including Autopilot rollout and SCCM co-management. • Partner with Security on endpoint policy enforcement and compliance. • Support remediation of vulnerabilities identified via enterprise scanning tools. • Contribute to overall endpoint security posture and Zero Trust initiatives. Additional Capabilities • Strong troubleshooting across Windows endpoint ecosystem. • Experience operating in co-managed (SCCM + Intune) environment. • Ability to work cross-functionally with Infrastructure, Security, and Service Desk teams. Success Profile • Proven ability to modernize endpoint management. • Brings a continuous improvement mindset, simplifying legacy processes and reducing operational friction. • Anticipates downstream operational and security impacts when introducing new tools, policies, or platform changes. • Strong ownership mindset over endpoint lifecycle and platform health. • Maintains high standards for execution, documentation, change control, and operational resilience. • Comfortable operating in regulated, security-conscious environments (CMMC, NIST, etc.) • Balances user experience, security, and supportability when making endpoint architecture decisions. • Capable of balancing operational stability with transformation initiatives. EEO: MACOM is an Equal Opportunity Employer committed to a diverse workforce. MACOM will not discriminate against any worker or job applicant on the basis of race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, genetic information, veteran status, military service, marital status, or any other category protected under applicable law. Reasonable Accommodation: MACOM is committed to working with and providing reasonable accommodations to qualified individuals with physical and mental disabilities. If you have a disability and are in need of a reasonable accommodation with respect to any part of the application process, please call +1-978-656-2500 or email HR_Ops@MACOM.com. Provide your name, phone number and the position title and location in which you are interested, and nature of accommodation needed, and we will get back to you. We also work with current employees who request or need reasonable accommodation in order to perform the essential functions of their jobs. ITAR Due to ITAR regulations, only candidates who are U.S. Persons (U.S. citizens, U.S. nationals, lawful permanent residents, or individuals granted asylum or refugee status) will be considered for this position. RSU Eligible This position is eligible to receive restricted stock unit (RSU) awards and cash bonuses, solely at MACOM’s discretion, subject to individual and company performance. Salary Range The Salary Range for this position is $138,000 – $209,000. Actual salary offered to candidate will depend on several factors, including but not limited to, work location, relevant candidates’ experience, education, and specific knowledge, skills, and abilities. Benefits: This position offers a comprehensive benefits package including but not limited to: • Health, dental, and vision insurance. • Employer-sponsored 401(k) plan. • Paid time off. • Professional development opportunities.

Requirements

Must-haves

Own global endpoint controls for encryption, local admin strategy, device control, conditional access readiness, and compliance reporting.
Establish device build standards, hardening baselines, and lifecycle policies.
Design, implement, and manage Intune configuration profiles and compliance policies across physical and virtual endpoints.
Administer the enterprise application catalog, including AppLocker and WDAC policy enforcement.
Lead cloud endpoint transformation initiatives, including Autopilot rollout and SCCM co-management.
Partner with Security on endpoint policy enforcement and compliance.
Support remediation of vulnerabilities identified via enterprise scanning tools.
Contribute to overall endpoint security posture and Zero Trust initiatives.
Additional Capabilities
Strong troubleshooting across Windows endpoint ecosystem.
Experience operating in co-managed (SCCM + Intune) environment.
Ability to work cross-functionally with Infrastructure, Security, and Service Desk teams.
Success Profile
Proven ability to modernize endpoint management.
Brings a continuous improvement mindset, simplifying legacy processes and reducing operational friction.
Anticipates downstream operational and security impacts when introducing new tools, policies, or platform changes.
Strong ownership mindset over endpoint lifecycle and platform health.
Maintains high standards for execution, documentation, change control, and operational resilience.
Comfortable operating in regulated, security-conscious environments (CMMC, NIST, etc.)
Balances user experience, security, and supportability when making endpoint architecture decisions.
Capable of balancing operational stability with transformation initiatives.
Due to ITAR regulations, only candidates who are U.S. Persons (U.S. citizens, U.S. nationals, lawful permanent residents, or individuals granted asylum or refugee status) will be considered for this position.
RSU Eligible
Benefits: This position offers a comprehensive benefits package including but not limited to:

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: cornerstone
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Professional Development