Solution Architect Physical Workplace 

What you will do

As a Physical Workplace Architect, you will be the key architect and technical lead for the design, implementation, security, and lifecycle management of managed client endpoint solutions within our ICT environment. This includes ensuring a secure, efficient, and future-proof workplace infrastructure that supports our employees in their daily activities. 

You will drive the evolution of the digital and physical workplace experience by collaborating closely with enterprise architects, IT operations, security teams, and external partners. You are responsible for maintaining compliance and optimizing end-user productivity through modern endpoint management and application lifecycle practices.  

Your key responsibilities:

Solution Architecture  

•  Design innovative and scalable client endpoint solutions for the physical workplace.  
• Enhance and maintain existing endpoint infrastructure based on business needs and technology evolution.  
• Collaborate with enterprise architects and multidisciplinary teams to ensure consistent architectural alignment.  
• Document solution designs and best practices for internal reuse and knowledge sharing.  

Implementation & Management  

•  Lead deployment of workplace technologies and upgrades across managed client environments (Windows, macOS, mobile, etc.).  
• Ensure performance, stability, and scalability of all endpoint solutions.  
• Align solutions with business priorities, operational requirements, and IT strategy.  

Application Lifecycle Management  

•  Ensure that standard applications on managed endpoints remain up to date and compliant.  
• Oversee the full lifecycle of workplace applications including packaging, deployment, patching, and retirement.  
• Enforce application security updates and patching policies across all endpoints.  

Security & Compliance  

•  Embed 'Security by Design' principles into all endpoint and workplace solutions.  
• Partner with the IT security team to proactively address security risks and implement hardening strategies.  
• Support incident response processes related to endpoint security breaches or vulnerabilities.  
• Ensure endpoint compliance with internal controls, data protection regulations, and industry standards.  

Operational Support  

• Provide expert (3rd-line) support in resolving complex incidents and systemic issues.  
• Serve as a knowledge hub within the team, guiding troubleshooting efforts and mentoring colleagues.  
• Continuously assess and improve workplace infrastructure and processes.  

Budget Ownership  

•  Manage and optimize budgets within the workplace domain.  
• Balance cost-efficiency with technology innovation and business value.  

What we do for you

We offer you the opportunity to join one of the world’s premier research centers in nanotechnology at its headquarters in Leuven, Belgium. With your talent, passion and expertise, you’ll become part of a team that makes the impossible possible. Together, we shape the technology that will determine the society of tomorrow.

We are committed to being an inclusive employer and proud of our open, multicultural, and informal working environment with ample possibilities to take initiative and show responsibility. We commit to supporting and guiding you in this process; not only with words but also with tangible actions. Through imec.academy, 'our corporate university', we actively invest in your development to further your technical and personal growth. 

We are aware that your valuable contribution makes imec a top player in its field. Your energy and commitment are therefore appreciated by means of a market appropriate salary with many fringe benefits. 

Who you are

You have extensive experience in:  

• Modern Endpoint management solutions (e.g., Microsoft Intune, Filewave, …).  
• Application packaging, deployment, and patch management with a security-first mindset. 
• Mobile Device and Application Management (MDM/MAM).  
• Client OS lifecycle and compliance strategies (Windows, macOS, mobile platforms).  
• Automation and scripting (e.g., PowerShell, Ansible, Bash).  
• Endpoint hardening and vulnerability mitigation techniques.  
• Network services and protocols relevant to endpoint management.  
• Working in multidisciplinary teams and vendor coordination.  
• Clear documentation and architectural thinking.  
• Strong communication and stakeholder engagement skills.  

IMEC and its affiliates will not accept unsolicited resumes from any source other than directly from a candidate. IMEC will consider unsolicited referrals and/or resumes submitted by vendors such as search firms, staffing agencies, professional recruiters, fee-based referral services and recruiting agencies (hereafter “Agency”) to have been referred by the Agency free of charge. IMEC will not pay a fee to any Agency that does not have a prior written agreement with IMEC, validated by its HR department, in place regarding a specific job opening and allowing to submit resumes.