Modern Workplace Architect (6-Month Fixed-Term)

About the role

Nexthink, a provider of digital employee experience management software, is looking for a Modern Workplace Architect to define and own the architecture of its corporate digital workplace: how employees' devices, collaboration tools, productivity suite and endpoint security fit together into one secure, cloud-native experience. This is a 6-month fixed-term position covering a maternity leave, based in Madrid.

Key responsibilities

• Define the modern workplace target architecture across endpoints, Microsoft 365, collaboration and end-user services, and maintain the multi-year workplace roadmap
• Set architecture principles, standards, reference designs and decision records, and lead technology evaluations and vendor selection
• Architect cloud-native endpoint management for Windows and macOS (Intune, Jamf) and zero-touch provisioning (Autopilot, Apple Business Manager)
• Own Microsoft 365 governance (Exchange Online, Teams, SharePoint, OneDrive) and collaboration controls, and lead secure adoption of Microsoft Copilot
• Design Zero Trust controls with Security and IAM, and endpoint security baselines (EDR, encryption, application control); support ISO 27001 and SOC 2 audit readiness
• Use Nexthink's DEX platform as an internal reference customer, drive self-service and automation with PowerShell and Microsoft Graph, and act as escalation point for complex incidents

Required profile

• 8+ years in end-user computing, modern workplace or enterprise IT, including 3+ years in an architect or senior technical lead role
• Proven track record designing cloud-native workplace architectures at enterprise scale for a hybrid workforce
• Fluent English; ability to explain architecture decisions to senior IT, Security and business stakeholders

Required skills

• Microsoft Intune, Windows Autopilot, Jamf (or equivalent) and Microsoft 365 architecture
• Microsoft Entra ID, Conditional Access and Zero Trust
• Defender for Endpoint, Microsoft Purview, PowerShell and Microsoft Graph API
• Familiarity with ISO 27001 or SOC 2; DEX or Copilot experience is a plus

What we offer

• Permanent contract and competitive compensation
• Private health insurance (Sanitas) and fully covered daily meal vouchers of 11 EUR
• Hybrid work model and flexible hours, with unlimited vacation plus 3 company-paid volunteer days
• Gym subscription allowance, childcare and transport compensation plan, and English and Spanish class reimbursement