Lead Endpoint Engineering Architect

About   Iovance Biotherapeutics, Inc.

Iovance Biotherapeutics , Inc.  is the global leader in innovating, developing, and delivering tumor infiltrating lymphocyte (TIL) cell therapies for patients with solid tumors. Amtagvi® (lifileucel) is the first FDA-approved, one-time treatment for previously treated advanced melanoma, now approved in three global markets and available at more than 95 authorized treatment centers. The  Iovance TIL platform  spans registrational trials and next-generation programs in additional solid tumors, including gene-edited and IL-12 tethered TIL therapies, next-generation IL-2, and precision immuno-oncology approaches. As the first and only company to take TIL therapy from concept to a broadly accessible commercial treatment, Iovance operates as an end-to-end cell therapy company, anchored by fully owned, centralized U.S.-based manufacturing that is scaled to serve thousands of cancer patients worldwide each year. For more information, please visit  www.iovance.com .

Amtagvi® and its accompanying design marks, Proleukin ® , Iovance ® , and IovanceCares™ are trademarks and registered trademarks of Iovance Biotherapeutics, Inc. or its subsidiaries. All other trademarks and registered trademarks are the property of their respective owners.

Information on Iovance’s broad, industry-leading patent portfolio is available on the Intellectual Property page on  www.iovance.com .

Overview

The Lead Endpoint Engineering Architect will own the architecture and build-out of Iovance’s endpoint management platform, covering roughly 1,000 Windows devices across corporate, lab, and field locations. This role exists to design a modern, reliable endpoint platform on Microsoft Intune, Autopilot, and Entra ID, build it, document it, and hand off day-to-day operations to the existing support team with clear runbooks. This is a hands-on technical role, not a management role. The Lead Endpoint Engineering Architect will partner with IT Security, Quality Assurance, and business stakeholders across the company, but the core of the job is engineering work: designing configurations, packaging applications, writing PowerShell, testing deployments, and solving problems.

Essential Functions and Responsibilities

Own the design and implementation of our Intune and Autopilot environment end-to-end: enrollment profiles, configuration profile architecture, compliance policies, Conditional Access, and update ring strategy.

Build Autopilot provisioning workflows that let us ship a factory-sealed laptop to any employee and have it arrive fully configured without a technician touching it. This includes selecting the right deployment modes for different device scenarios and troubleshooting the enrollment edge cases that inevitably come up.

Create a layered configuration profile structure in Intune: security baselines that apply to everything, role-specific profiles for different groups, and exception policies where needed.

Set up Windows Update for Business with proper ring management so updates deploy in controlled phases.

Design and own application deployment approach using Intune’s Win32 packaging model. This means proper dependency chains, detection rules that actually verify successful installs, and a consistent test-before-deploy process. Application packaging is a significant part of this role, especially during the initial platform build-out.

Build Proactive Remediations that detect and auto-fix common problems like dropped network drives, configuration drift, and application health issues before users have to call the help desk.

Establish and maintain laptop performance baselines and remediation workflows — including startup time optimization, memory and CPU utilization profiling, background service rationalization, and bloatware removal — using Intune Proactive Remediations (detection + remediation script pairs), Endpoint Analytics scores, and Windows performance counters to identify degradation patterns before they generate tickets, and to enforce consistent performance standards across both hardware models.

Work with IT Security to implement compliance policies and Conditional Access rules that give us continuous, auditable proof that our endpoints meet our security baseline.

Write and maintain the documentation that makes this platform operable by others on the team: architecture diagrams, runbooks, application packaging standards, and troubleshooting guides.

Train and mentor our deskside and help desk staff on Intune operations, including how to look up a device, check compliance, verify app assignments, trigger syncs, and know when to escalate.

Evaluate endpoint management tools and technologies as needed, particularly OEM driver management solutions for our hardware fleet.

Design, build, and maintain SharePoint Online sites, libraries, and lists that support departmental workflows. Configure site permissions, access controls, and governance policies aligned with Iovance's security and compliance requirements. Manage site lifecycle including provisioning, decommissioning, and archival. Troubleshoot site performance, broken permissions, and content issues. Collaborate with business stakeholders to gather requirements and translate them into functional SharePoint solutions

Develop and maintain Power Automate flows to automate business processes such as approvals, notifications, document routing, and data collection. Integrate Power Automate with SharePoint, Microsoft Forms and other M365 services. Monitor flow run history, troubleshoot failures, and optimize performance. Maintain documentation of all automated workflows including flow diagrams, trigger conditions, and error-handling logic

Create and manage Microsoft Forms for internal data collection, surveys, and intake processes. Connect Forms to SharePoint lists and Power Automate flows for end-to-end process automation. Ensure form designs meet accessibility and usability standards

Must adhere to Iovance Biotherapeutics’ core values, policies, procedures, and business ethics.

Perform miscellaneous duties as assigned.

Required Education, Skills, and Knowledge