--- title: 'Lead Endpoint Engineering Architect at Iovance Biotherapeutics' canonical: 'https://feeny.ai/job/lead-endpoint-engineering-architect-iovance-biotherapeutics-remote-7ska57zabwp5' type: 'job' last_seen: '2026-09-09' --- # Lead Endpoint Engineering Architect at Iovance Biotherapeutics - **Company:** Iovance Biotherapeutics - **Location:** Remote - **Compensation:** $195k–$210k - **Work type:** remote - **Posted:** 2026-09-03 - **Last confirmed live:** 2026-09-09 - **Apply:** https://job-boards.greenhouse.io/iovancebiotherapeutics/jobs/5414650008 ## Job description Iovance Biotherapeutics aims to be the global leader in innovating, developing and delivering tumor infiltrating lymphocyte (TIL) therapy for people with cancer. We are pioneering a transformational approach to treating cancer by harnessing the ability of the human immune system to recognize and attack diverse cancer cells in each patient. The Iovance TIL platform has demonstrated promising clinical data across multiple solid tumors. We are committed to continuous innovation in cell therapy, including gene-edited cell therapy, which may be a promising option for patients with cancer. ## Overview The Lead Endpoint Engineering Architect will own the architecture and build-out of Iovance’s endpoint management platform, covering roughly 1,000 Windows devices across corporate, lab, and field locations.  This role exists to design a modern, reliable endpoint platform on Microsoft Intune, Autopilot, and Entra ID, build it, document it, and hand off day-to-day operations to the existing support team with clear runbooks.  This is a hands-on technical role, not a management role.  The Lead Endpoint Engineering Architect will partner with IT Security, Quality Assurance, and business stakeholders across the company, but the core of the job is engineering work: designing configurations, packaging applications, writing PowerShell, testing deployments, and solving problems. Essential Functions and Responsibilities - Own the design and implementation of our Intune and Autopilot environment end-to-end: enrollment profiles, configuration profile architecture, compliance policies, Conditional Access, and update ring strategy. - Build Autopilot provisioning workflows that let us ship a factory-sealed laptop to any employee and have it arrive fully configured without a technician touching it. This includes selecting the right deployment modes for different device scenarios and troubleshooting the enrollment edge cases that inevitably come up. - Create a layered configuration profile structure in Intune: security baselines that apply to everything, role-specific profiles for different groups, and exception policies where needed. - Set up Windows Update for Business with proper ring management so updates deploy in controlled phases. - Design and own application deployment approach using Intune’s Win32 packaging model. This means proper dependency chains, detection rules that actually verify successful installs, and a consistent test-before-deploy process.  Application packaging is a significant part of this role, especially during the initial platform build-out. - Build Proactive Remediations that detect and auto-fix common problems like dropped network drives, configuration drift, and application health issues before users have to call the help desk. - Establish and maintain laptop performance baselines and remediation workflows — including startup time optimization, memory and CPU utilization profiling, background service rationalization, and bloatware removal — using Intune Proactive Remediations (detection + remediation script pairs), Endpoint Analytics scores, and Windows performance counters to identify degradation patterns before they generate tickets, and to enforce consistent performance standards across both hardware models. - Work with IT Security to implement compliance policies and Conditional Access rules that give us continuous, auditable proof that our endpoints meet our security baseline. - Write and maintain the documentation that makes this platform operable by others on the team: architecture diagrams, runbooks, application packaging standards, and troubleshooting guides. - Train and mentor our deskside and help desk staff on Intune operations, including how to look up a device, check compliance, verify app assignments, trigger syncs, and know when to escalate. - Evaluate endpoint management tools and technologies as needed, particularly OEM driver management solutions for our hardware fleet. - Design, build, and maintain SharePoint Online sites, libraries, and lists that support departmental workflows. Configure site permissions, access controls, and governance policies aligned with Iovance's security and compliance requirements. Manage site lifecycle including provisioning, decommissioning, and archival. Troubleshoot site performance, broken permissions, and content issues. Collaborate with business stakeholders to gather requirements and translate them into functional SharePoint solutions - Develop and maintain Power Automate flows to automate business processes such as approvals, notifications, document routing, and data collection. Integrate Power Automate with SharePoint, Microsoft Forms and other M365 services. Monitor flow run history, troubleshoot failures, and optimize performance. Maintain documentation of all automated workflows including flow diagrams, trigger conditions, and error-handling logic - Create and manage Microsoft Forms for internal data collection, surveys, and intake processes. Connect Forms to SharePoint lists and Power Automate flows for end-to-end process automation. Ensure form designs meet accessibility and usability standards - Must adhere to Iovance Biotherapeutics’ core values, policies, procedures, and business ethics. - Perform miscellaneous duties as assigned. Required Education, Skills, and Knowledge - 8+ years in enterprise IT, with at least 4–5 of those years spent deep in Intune, Autopilot, Entra ID, Conditional Access, and Windows Update for Business. - Experience architecting and operating an Intune environment managing 1,000+ devices. Understanding of profile layering, group targeting, policy conflicts, and the operational realities of managing a fleet this size, not just the theory. - Strong PowerShell skills at a production-automation level. Experience writing scripts that run unattended across hundreds of devices, handle errors gracefully, and are maintainable by others.  Proactive Remediations, device config scripts, and reporting. - Real experience packaging Win32 applications for Intune: silent installs, detection rules, dependency chains, supersedence. - Solid understanding of Entra ID dynamic groups, Conditional Access policy design, and how the identity, device management, and security layers interact in a Microsoft 365 environment. - Experience managing drivers across a mixed hardware fleet using OEM tools (Dell Command Update, Lenovo System Update, HP Client Management) or Windows Update for Business driver management. - Experience working in a regulated industry such as pharma, biotech, medical device, or financial services, where change control and documentation aren’t optional. - Experience working across IT, security, quality, and business teams. - Experience documenting and writing runbooks for others to follow. Preferred Education, Skills, and Knowledge - Microsoft Certified: Endpoint Administrator Associate (MD-102) or equivalent. - Experience migrating from SCCM/MECM to Intune, including co-management and hybrid identity scenarios. - Familiarity with how endpoint changes map to validation and qualification requirements in regulated environments. - Working knowledge of Microsoft 365 E3/E5 licensing and what security, compliance, and device management capabilities come with each tier. - Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field. Physical Demands and Activities Required The physical demands described here represent those an employee may encounter while performing the essential functions of this job. Reasonable accommodation may be provided to enable individuals to perform these functions. - Ability to remain in a stationary position for extended periods - Ability to move about within an office or remote workspace and exert up to 10 pounds of force occasionally - Visual acuity sufficient for preparing and analyzing data, viewing computer screens, and extensive reading - Repetitive motion involving wrists, hands, and/or fingers - Ability to communicate effectively to exchange information - Ability to engage in analytical, conceptual, and problem‑solving activities in a dynamic business environment Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem-solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously with a sense of urgency; and ability to meet deadlines Work Environment This job operates in a professional or remote office environment and requires operating standard office equipment and keyboards. #li-remote The annual base salary we reasonably expect to pay is listed. Individual pay decisions depend on various factors, such as primary work location, complexity and responsibility of the role, job duties/requirements, and relevant education, experience and skills. Pay Transparency $195,000—$210,000 USD The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time. Iovance is committed to cultivating and offering a diverse and inclusive work environment. As an equal-opportunity employer, our employees and applicants will be considered without regard to an individual’s race, color, religion, sex, pregnancy, national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information, military and veteran status, and any other characteristic protected by applicable law. If you need assistance or accommodation to apply to one of our opportunities, please contact careers@iovance.com. By voluntarily providing information and clicking “Submit Application”, you explicitly consent to the collection and use of your personal information for the purposes described above and in our [Candidate Privacy Notice](https://www.iovance.com/privacy-policy/). ## About Iovance Biotherapeutics ## Company Overview - **One-liner**: Iovance Biotherapeutics is pioneering tumor infiltrating lymphocyte (TIL) cell therapies to develop personalized, one-time treatments for solid tumor cancers. - **Entity Type**: Public (NASDAQ: IOVA) - **Headquarters**: San Carlos, California, USA - **Founded**: 2007 (originally named Lion Biotechnologies, renamed Iovance Biotherapeutics in 2017) - **Founders**: Not publicly available (the company was formed through a merger and rebranding) ## Core Business - **Primary industry**: Biotechnology — Cell Therapy (Immuno-Oncology) - **Target customers**: B2B / B2G — Healthcare providers, clinical trial sites, and ultimately patients with advanced solid tumors (melanoma, non-small cell lung cancer, endometrial cancer, etc.) - **Mission or purpose statement**: To be the global leader in innovating, developing, and delivering tumor infiltrating lymphocyte (TIL) therapy for people with cancer, harnessing the immune system to recognize and attack diverse cancer cells. ## Products & Services - **Lifileucel (IOV-009)**: A one-time, personalized TIL therapy for advanced melanoma. It is the first approved TIL therapy for a solid tumor (FDA approved in early 2024 under the brand name Amtagvi). - **IOV-LUN-202**: An investigational TIL therapy for advanced non-small cell lung cancer (NSCLC) currently in Phase 2 clinical trials. - **IOV-END-201**: An investigational TIL therapy for advanced endometrial cancer currently in Phase 2 clinical trials. - **IOV-4001**: A next-generation, gene-edited TIL therapy (using TALEN technology to inactivate PD-1 expression) for solid tumors, currently in preclinical/early clinical development. - **IOV-3001**: An engineered IL-2 therapy (licensed from Novartis) designed to support TIL therapy efficacy, currently in preclinical development. - **Cell Therapy Manufacturing (iCTC)**: The company operates a 136,000-square-foot, state-of-the-art Cell Therapy Center in Philadelphia, PA, for proprietary GMP manufacturing of TIL therapies. ## Market Standing - **Valuation/Market Cap**: As of early 2026, market capitalization is approximately $2.5–3.0 billion (fluctuates with FDA news and clinical data). Check current price on NASDAQ: IOVA. - **Key Metric (Revenue)**: Iovance generated its first commercial revenue from Lifileucel/Amtagvi in 2024. Annual revenue for 2025 was approximately $180–220 million (estimate based on analyst reports; exact figure not yet fully disclosed). The company is not yet profitable. - **Key Metric (Funding)**: As a public company, Iovance has raised over $1.5 billion through public offerings and debt financings. Notable recent raise: a public offering in 2022 and subsequent at-the-market offerings. - **Notable Investors/Partners**: - Novartis (license partner for IOV-3001) - Major institutional investors (e.g., BlackRock, Vanguard, and several healthcare-focused funds) - Collaborations with major cancer centers for clinical trials (e.g., MD Anderson, Memorial Sloan Kettering, etc.) - **Growth Signals**: - FDA approval of Lifileucel (Amtagvi) in early 2024 — a landmark first-in-class approval for TIL therapy in solid tumors. - Rapid commercial launch and expansion of treatment centers across the U.S. - Multiple ongoing Phase 2/3 trials in large indications (NSCLC, endometrial cancer, frontline melanoma). - Investment in next-generation gene-edited TIL (IOV-4001) and engineered IL-2 (IOV-3001) to improve efficacy and expand addressable patient populations. ## Competitive Advantages - **First-to-market TIL therapy**: Iovance is the only company with an FDA-approved TIL therapy for a solid tumor (Amtagvi for melanoma), giving it a significant head start in manufacturing, commercial infrastructure, and physician education. - **Proprietary manufacturing platform**: The in-house iCTC facility in Philadelphia enables scalable, standardized GMP production of personalized TIL therapies, a major barrier to entry for competitors. - **Broad solid tumor pipeline**: Unlike CAR-T therapies (primarily effective in blood cancers), TIL therapy has shown promise across multiple solid tumor types, providing a large addressable market. - **Polyclonal T cell approach**: The therapy targets a broad range of neoantigens unique to each patient’s tumor, potentially reducing the risk of immune escape compared to single-target therapies. ## Strategic Focus - **Commercial expansion**: Scaling up the launch of Amtagvi for advanced melanoma and expanding treatment center network globally. - **Pipeline acceleration**: Advancing pivotal trials in NSCLC (IOV-LUN-202) and endometrial cancer (IOV-END-201) to secure additional FDA approvals. - **Next-generation innovation**: Developing gene-edited TIL (IOV-4001) to enhance persistence and efficacy, and engineered IL-2 (IOV-3001) to improve the TIL therapy cycle. - **Manufacturing optimization**: Continuing to improve manufacturing efficiency and turnaround time at the iCTC facility to support growing demand and reduce costs. ## Why Work Here - **Mission-driven culture**: The company is deeply patient-centric, with a clear focus on delivering transformative therapies to cancer patients. Employees often cite the meaningful impact of their work as a key motivator. - **Values**: Integrity, agility, innovation, collaboration, and excellence are core to the company’s operating philosophy. The culture emphasizes transparency, teamwork, and high ethical standards. - **Diversity, Equity, and Inclusion**: Iovance has a stated commitment to DEI, recognizing that internal diversity is critical to serving diverse patient populations and driving innovation. - **Remote/Hybrid policy**: Many roles (especially in clinical, medical affairs, marketing, and commercial functions) are remote or hybrid. Laboratory and manufacturing roles are based on-site in Philadelphia, PA (iCTC) or San Carlos, CA (HQ). - **Benefits**: Competitive salaries, annual cash bonuses, long-term incentives (stock options/RSUs), 401(k) with match, Employee Stock Purchase Plan, comprehensive medical/dental/vision (low employee cost), Health Savings Account contributions, paid parental leave, tuition assistance, wellness program (gym discounts), and professional development opportunities. - **Work environment**: Agile and fast-paced, typical of a biotech company at a critical growth stage. The company values data-driven decision-making and encourages employees to bring their best efforts every day. ## Sources 1. [iovance.com](https://www.iovance.com/) 2. [iovance.com - About Us](https://www.iovance.com/about-iovance-biotherapeutics/) 3. [iovance.com - Culture](https://www.iovance.com/culture/) 4. [job-boards.greenhouse.io](http://job-boards.greenhouse.io/iovancebiotherapeutics) ## Other roles at Iovance Biotherapeutics - [Production Planner](https://feeny.ai/job/production-planner-iovance-biotherapeutics-philadelphia-2jkyvc79mh98) — Philadelphia, PA - [Associate Director, Digital Experience & AI Production](https://feeny.ai/job/associate-director-digital-experience-ai-production-iovance-biotherapeutics-6vpwzzkanpmb) - [Aseptic Manufacturing Technician I - Day Shift A [Contract to Hire]](https://feeny.ai/job/aseptic-manufacturing-technician-i-day-shift-a-contract-to-hire-iovance-z7jk5970wezw) — Philadelphia, PA - [IT Support Analyst II [Contract to Hire]](https://feeny.ai/job/it-support-analyst-ii-contract-to-hire-iovance-biotherapeutics-philadelphia-kqj3mcava128) — Philadelphia, PA - [Clinical Trial Manager](https://feeny.ai/job/clinical-trial-manager-iovance-biotherapeutics-remote-fewmr4x5pabx) - [Senior Clinical Research Associate](https://feeny.ai/job/senior-clinical-research-associate-iovance-biotherapeutics-remote-cph0sr2jm74r) - [Technical Learning Specialist I, GMP Training Administration](https://feeny.ai/job/technical-learning-specialist-i-gmp-training-administration-iovance-qzkrm7zwxcte) — Philadelphia, PA - [Aseptic Manufacturing Technician II - Day Shift B [Contract to Hire]](https://feeny.ai/job/aseptic-manufacturing-technician-ii-day-shift-b-contract-to-hire-iovance-mpm8m6q02zp6) — Philadelphia, PA - [Aseptic Manufacturing Technician I - Night Shift B [Contract to Hire]](https://feeny.ai/job/aseptic-manufacturing-technician-i-night-shift-b-contract-to-hire-iovance-sm9rsr774abj) — Philadelphia, PA - [Senior Project Manager](https://feeny.ai/job/senior-project-manager-iovance-biotherapeutics-philadelphia-544ts29ssrxz) — Philadelphia, PA