Modern Workplace Architect (6 month FTC) Full-timeDepartment: Information TechnologyDept: Information TechnologyDivision: General AdministrationNexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any applicationor network, before employees notice the issue. As the first solutionto allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,500 customers to provide better digital experiences to more than 25+ millionemployees. Dual headquartered in Lausanne, Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide. #LI-HybridWe are looking for a Modern Workplace Architect to define and own the architecture of Nexthink's corporate digital workplace: how every Nexthinker's devices, collaboration tools, productivity suite and endpoint security fit together into one secure, cloud-native and frictionless experience. As a company that sells digital employee experience, our own workplace is our showcase
- this role makes it one. This is a 6-month temporary position covering a maternity leave.
You will partner with IT Operations on delivery, with the IAM and Security teams on standards and controls, and with business stakeholders on adoption, owning the target architecture and roadmap end to end.

Key Responsibilities
Workplace Strategy & Architecture Define and own the modern workplace target architecture across endpoints, Microsoft 365, collaboration, and end-user services.
Establish architecture principles, standards, reference designs and decision records for the corporate workplace estate.
Act as the design authority for changes affecting the employee digital experience.




Architect cloud-native endpoint management for Windows and macOS using Microsoft Intune and Jamf, including co-management retirement where applicable.
Design zero-touch provisioning (Windows Autopilot, Apple Business Manager / Automated Device Enrollment) for a global, hybrid workforce.
Define configuration baselines, patching and update rings (Windows Update for Business, macOS updates), and application packaging and delivery standards.
Own the architecture and governance of Microsoft 365: Exchange Online, Teams, SharePoint and OneDrive, including tenant configuration and lifecycle policies.
Define collaboration governance: workspace provisioning, external sharing, guest access, retention and sprawl control.
Slack, Zoom, Google Workspace) where relevant.
Lead the secure adoption of Microsoft Copilot and other AI productivity tools, including data readiness, oversharing remediation and usage policies.
Endpoint Security & Zero Trust Partner with Security and IAM to design Zero Trust controls for the workplace: device compliance, Conditional Access, and identity-bound device trust.
Define endpoint security baselines and architecture for EDR, disk encryption, local admin removal and application control.
Design data protection controls with Microsoft Purview: sensitivity labels, DLP and information protection across devices and collaboration tools.




Support ISO * and SOC 2 audit readiness with documented workplace controls and evidence.
Digital Employee Experience & Automation Use Nexthink's own DEX platform to measure and improve employee experience; Automate workplace operations with PowerShell, Microsoft Graph and scripting, and set engineering standards for workplace automation.8+ years in end-user computing, modern workplace or enterprise IT, including 3+ years in an architect or senior technical lead role.
Demonstrable track record designing and delivering cloud-native workplace architectures at enterprise scale for a distributed, hybrid workforce.
Deep hands-on expertise in Microsoft Intune and Windows Autopilot; strong experience managing macOS with Jamf or equivalent.
Expert knowledge of Microsoft 365 architecture and governance: Exchange Online, Teams, SharePoint and OneDrive.
Solid understanding of Microsoft Entra ID, Conditional Access and Zero Trust principles applied to devices and collaboration.
Experience with endpoint security and data protection: Defender for Endpoint (or equivalent EDR), Microsoft Purview, encryption and application control.
Automation skills with PowerShell, Microsoft Graph API or similar scripting.
Familiarity with ISO * or SOC 2 controls and audit evidence.
Experience with DEX or end-user experience monitoring tools is a strong plus; Microsoft Certified: Ability to communicate architecture decisions clearly to senior IT, Security and business stakeholders. Fluent English.
We are the pioneers and trailblazers of a integral IT Market Category (DEX) that is shaping the future of how the world works, giving our customers' IT Teams total digital visibility across their enterprise. This enables our IT teams to solve complex technical challenges, create ever more productive workplaces, and

📌 Technisch Architect (España)
🏢 Nexthink
📍 España