{"id":3384458,"url":"https://alion.io/job/gsk-senior-principal-euc-mdm-platform-architect","title":"Senior Principal - EUC / MDM Platform Architect","company":{"id":6649,"name":"GSK","domain":"gsk.com","url":"https://alion.io/company/gsk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":56,"ghost_share":0,"stale_share":0.768,"repost_share":0.018,"time_to_fill_p50_days":17,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":31000,"max_usd":63000,"period":"year","method":"role_seniority_country_cell","sample_n":21},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Edge AI","optional":false},{"name":"Least Privilege","optional":false},{"name":"Self-Healing","optional":false},{"name":"Zero Trust","optional":false},{"name":"21 CFR Part 11","optional":true},{"name":"Azure","optional":true},{"name":"C#","optional":true},{"name":"CI/CD","optional":true},{"name":"GitOps","optional":true},{"name":"Power BI","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true},{"name":"Wi-Fi","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-28T06:47:37Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T00:29:54Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Business Introduction\nGSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.\nOur diverse portfolio consists of vaccines, specialty medicines, and general medicines.\nThrough continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.\nJob Purpose\nBe the definitive technical authority for how 50,000+ employees across [X] countries experience and interact with their devices. This role owns the architecture, reference designs, technical standards and engineering direction for the entire end user computing estate - laptops, desktops, mobiles, tablets, virtual desktops, meeting rooms, and specialised or regulated endpoints.\nWhere the Director owns delivery, budget and people, the Principal Architect owns what good looks like technically and holds the organisation to it. This is a hands-on-capable role: the expectation is to prototype, prove and pressure-test designs personally, not solely to review other people's slides.\nThe Principal Architect is accountable for ensuring the estate is secure by design, cloud-native, automatable, cost-efficient and - critically - genuinely pleasant to use. They are the person who says no to architecture that will not survive contact with 50,000 users, and who can explain why in terms both engineers and executives accept.\nKey Responsibilities\nOwn the target-state architecture for end user computing: platform selection, device management topology, identity integration, application delivery, security control placement and telemetry. \nProduce and maintain reference architectures, design patterns, technical standards and architecture decision records (ADRs) - with trade-offs made explicit rather than buried. \nDefine the technical roadmap that underpins the EUC strategy: platform migrations, deprecations, convergence of fragmented tooling, and the sequencing that makes it deliverable. \nContinuously evaluate the market - modern management, AI PCs and on-device inference, cloud PC/DaaS economics, zero-trust endpoint models - and separate genuine capability from vendor narrative. \nAct as the design authority for all endpoint change: chair or sit on the EUC architecture review board, approve significant designs, and hold veto on standards deviation. \nSet and police the exception process - make the right path the easy path, and make deviations visible, time-bound and owned. \nReview and assure supplier and MSP technical designs; ensure partners build to the organisation's architecture rather than their own delivery convenience. \nSet engineering standards for configuration-as-code, packaging, testing, release management and rollback across the endpoint estate. \nPrototype and prove new capability in a lab before it reaches production; build the reference implementation the engineering teams then industrialise. \nMentor and technically develop senior engineers and platform leads; raise the ceiling of the whole team, not just your own output. \nPartner with Cyber Security to embed zero-trust principles at the endpoint: device trust and attestation, conditional access, least privilege, application control, EDR and DLP placement. \nArchitect for regulated and validated environments - GxP-qualified endpoints, computer system validation (CSV/CSA), data residency and privacy obligations, and audit/SOX ITGC evidence generation as a designed-in property rather than a manual scramble. \nOwn the technical response to endpoint-relevant threat scenarios and drive architectural remediation of systemic vulnerabilities. \nArchitect the digital employee experience (DEX) telemetry model: what is measured, how it is collected, where it lands, and how it drives automated remediation. \nDesign for self-healing and self-service by default; treat every recurring ticket category as an architectural defect until proven otherwise. \nTranslate architecture into business consequence for senior stakeholders - cost, risk, productivity, time-to-value. \nRepresent EUC architecture in enterprise architecture forums, security governance, and vendor executive briefings. \nProfessional Qualifications\nBachelor's degree in Computer Science, Engineering or a related technical discipline, or equivalent demonstrable professional expertise. \nRelevant certifications desirable (e.g., Microsoft Certified: Endpoint Administrator Expert, Azure Solutions Architect Expert, Cybersecurity Architect Expert, Jamf Certified Expert, TOGAF, CISSP or SABSA). \nArea of Specialisation\nEnd user computing architecture at global enterprise scale - platform selection, device management topology, identity integration, application delivery and telemetry. \nModern endpoint management (Intune/MECM) and macOS management (Jamf), including co-management, hybrid-to-cloud-native migration and staged ring-based rollout. \nEndpoint security architecture and zero-trust design - device trust, conditional access, application control, EDR/XDR, DLP and secure baselines. \nRegulated and validated endpoint environments - GxP-qualified endpoints, CSV/CSA, data residency and audit/SOX ITGC evidence generation designed in. \nExperience Required\nOverall 15 years and 12+ years in IT infrastructure or end user computing, including 5+ years in a principal, lead or enterprise architect capacity with recognised design authority. \nArchitecture ownership for an endpoint estate of 20,000+ devices across multiple countries and regulatory jurisdictions. \nExpert-level, hands-on-derived command of modern endpoint management (Intune/MECM) and macOS management - sufficient to build the reference implementation personally, not only to specify it. \nDemonstrable advanced scripting and automation portfolio; evidence of configuration-as-code applied to a production endpoint estate. \nWorking fluency in enterprise endpoint security and zero-trust architecture, with a track record of co-designing controls alongside a Cyber Security function. \nLed the architecture of at least one large-scale endpoint platform migration or transformation through to production, including the failures and what was learned from them. \nAble to produce architecture documentation of a standard that withstands external audit and supplier scrutiny. \nProven credibility with both senior engineers and executive stakeholders, in English, in a global matrixed organisation. \nWillingness to travel internationally, approximately [5-15]% of the time. \nDesirable:\nExperience in a regulated industry - pharmaceutical, life sciences, biotech, financial services or healthcare - with practical GxP/CSV/CSA and Annex 11 / 21 CFR Part 11 exposure. \nArchitecture for specialised endpoints: laboratory instrument workstations, manufacturing and shop-floor devices, clinical and field devices, kiosks, shared and multi-user workstations. \nLeading a major platform transformation: SCCM-to-Intune migration, Windows 10→11 at scale, MSP transition, or M&A integration/divestment of an endpoint estate. \nSustainability-aware design - device longevity, power management, refurbishment and Scope 3 implications of architectural choices. \nAccessibility and assistive technology designed into the standard build rather than bolted on. \nNetwork fundamentals relevant to endpoints - SASE/ZTNA, split tunnelling, Wi-Fi 6/7, certificate-based network access. \nContribution to the wider community - open-source tooling, conference speaking, published technical writing, vendor customer advisory boards. \nSkills/Background\nDeep technical breadth across Windows and macOS internals, modern endpoint management, identity, endpoint security, application delivery, virtual desktop / cloud PC, and mobile - with the judgement to know where tenant-wide standardisation matters and where a business exception is defensible. \nAdvanced PowerShell and at least one general-purpose language (Python, C#, Go) applied to real automation, not toy scripts. \nConfiguration-as-code and GitOps discipline - version-controlled endpoint configuration, CI/CD for policy and package deployment, automated testing and staged ring-based rollout as the default way endpoint change is delivered. \nAPI-first integration - Microsoft Graph, ServiceNow, MDM and security tool APIs; designing integrations that survive vendor change. \nTelemetry and data craft - designing measurement into the estate, with competence in the query languages and platforms the data lands in (KQL, Log Analytics, Power BI or equivalent). \nArchitectural discipline - reference designs, ADRs, HLD/LLD, and the ability to write clearly enough that others can build from it and external auditors can accept it. \nTrade-off reasoning - cost, risk, experience, security and operability weighed explicitly; comfortable being the person who quantifies the uncomfortable option. \nScale intuition - designing for 50,000 devices, unreliable networks, disconnected users, and the long tail of exceptions that always exists. \nTechnical leadership without authority - landing decisions across engineering, security, service delivery and vendors by credibility and evidence. \nExecutive communication - making architecture legible and decision-ready for non-technical leadership. \nConstructive challenge - able to disagree with a Director, a vendor or a security architect and keep the relationship intact. \nSkills\nCloud Infrastructure, Cybersecurity, Design Thinking, Endpoint Encryption, Endpoint Security, End User Services, Financial Operations, Jamf Pro, Network Protocols, Network Security, Zero TrustWhy GSK?\nUniting science, technology and talent to get ahead of disease together.\nGSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.\nPeople and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.\nInclusion at GSK:\nAs an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.\nPlease contact our Recruitment Team at  to discuss your needs.\nImportant notice to Employment businesses/ Agencies\nGSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals b...","description_format":"text","description_chars":13063,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Vaccines","Endpoint Security","Oncology Therapeutics","Infectious Disease Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-28T06:47:37Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":17,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/gsk-senior-principal-euc-mdm-platform-architect","json_url":"https://alion.io/job/gsk-senior-principal-euc-mdm-platform-architect.json","meta":{"generated_at":"2026-10-30T05:07:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7199,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6649},"rest":"https://alion.io/mcp/rest/get_company?id=6649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgsk-senior-principal-euc-mdm-platform-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgsk-senior-principal-euc-mdm-platform-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgsk-senior-principal-euc-mdm-platform-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gsk-senior-principal-euc-mdm-platform-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgsk-senior-principal-euc-mdm-platform-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3384458}},{"tool":"search_jobs","arguments":{"company":"gsk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3384458},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}