• Lead and mentor a global team of engineers to deliver high-performing identity and endpoint services. • Administer and optimize the Microsoft 365 tenant, including Exchange Online, SharePoint, OneDrive, Teams, and associated collaboration tools. • Work closely with SecOps to implement Zero Trust principles, Conditional Access, and Defender integration. • Design and deploy end-to-end employee lifecycle automations integrated with HRIS systems (Workday, etc) to ensure seamless onboarding/offboarding. • Oversee operations for Intune and Microsoft Configuration Manager (MECM) while providing expert-level management of Apple Mac environments via Jamf. • Lead the strategy and delivery of virtual desktop solutions (Azure Virtual Desktop/Windows 365) to support a global, flexible workforce. • Drive license optimization, patch compliance, and consistent hardware/software configurations across Windows and macOS. • Define and track KPIs/SLAs while acting as a high-level technical escalation point for complex incidents and ensure root-cause resolution for recurring issues.