IT Architect Endpoint Management

Creating a future worth living for future generations gets us out of bed every morning. Depending on the project, we are consultants, implementers, or both for sustainable, innovative and economical solutions for real estate, industry, energy and infrastructure. Our more than 6,500 employees at over 80 locations worldwide support our customers in interdisciplinary teams. Our thinking is both visionary and realistic. We work independently and as part of a team. With passion and the latest technologies. We unite. Join us at Dreso and let’s create a world we want to live in.

We are looking for an IT Architect Endpoint Management profile to join our IT team. The position provides advanced technical support to internal users across different countries and global regions, while also contributing to system administration and network operations to ensure stable and secure IT services.

Join us in shaping the future of IT security, developing secure and sustainable endpoint architectures, and actively contributing to making our digital workplace resilient and compliant. With us, you’ll have the freedom to contribute big ideas and take initiative. As part of an interdisciplinary and diverse team, you’ll apply your expertise in endpoint management to ambitious projects, help shape standards and roadmaps, and ensure that security and compliance requirements are reliably implemented in accordance with BSI-CON-11.1. We look forward to receiving your application for our office in Málaga.

Due to the international scope of the role, working hours are not fixed and may include evening, night, weekend, or rotating shifts, depending on the regions being supported.
 

Key Responsibilities

Endpoint Architecture & Strategy

• Develop and design a highly secure endpoint management environment with clear target architectures, standards, and governance models.
• Ensure that security, compliance, and regulatory requirements (e.g., BSI-CON-11.1 and related guidelines) are embedded into endpoint architectures and operational processes.
• Evaluate, design, and implement new endpoint technologies and solutions to continuously improve the digital workplace experience.
• Lead endpoint management projects from planning and design through implementation and operational transition.

Endpoint Operations & Management

• Provide Level 2/3 support for complex endpoint-related incidents, service requests, and problem management activities.
• Manage incidents through their full lifecycle, perform root cause analysis, and drive permanent resolution of recurring issues.
• Support and maintain Microsoft Intune, Entra ID, and Microsoft 365 endpoint management services.
• Configure, test, and optimize device policies, compliance policies, configuration profiles, and endpoint security controls.
• Monitor endpoint compliance, coordinate remediation activities, and support device lifecycle management processes.
• Support onboarding, offboarding, device provisioning, and deployment activities for end users.

Software Deployment & Continuous Improvement

• Oversee software packaging, testing, deployment, and lifecycle management activities for business applications and endpoint platforms.
• Troubleshoot and resolve application deployment and device management issues.
• Validate new endpoint configurations, policies, and solutions before production rollout.
• Participate in pilot deployments, testing initiatives, automation efforts, and continuous service improvement programs.

Stakeholder & Vendor Management

• Manage external service providers and coordinate interfaces between IT Security, Infrastructure, Workplace Services, and Operations teams.
• Act as a technical advisor and escalation point for endpoint-related topics across the organization.
• Support knowledge sharing and technical enablement within the Endpoint Management team.

Documentation & Governance

• Create and maintain technical documentation, architecture standards, operational procedures, and knowledge base articles.
• Document recurring issues, standard solutions, and architectural decisions.
• Ensure endpoint management processes and documentation align with security and compliance requirements.

• 4+ years of experience in Endpoint Management, IT Operations, or advanced IT Support
• Experience with Microsoft Intune and endpoint management solutions
• Knowledge of software packaging and application deployment
• Strong troubleshooting and analytical skills
• Understanding of endpoint security and compliance concepts
• Basic PowerShell knowledge is an advantage
• Strong communication and customer service skills
• A high level of English is required (C1)

• To ensure your work-life balance, we offer the option of mobile working
• We promote your professional and personal development through individually tailored student mentoring
• Make valuable contacts within Drees & Sommer and expand your professional network
• Modern workplace and equipment; Teams meetings and participation in corporate workshops
• Receive compensation that gives you financial independence during your studies