Infrastructure Systems Architect

The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S., supporting over 23,000 healthcare professionals and team members at more than 1,150 locations across 48 states.

Our five supported healthcare practices operate under the brands Aspen Dental, ClearChoice, WellNow, Chapter Aesthetic Studio, and Lovet. We’re committed to enabling healthcare professionals to focus on patient care while we handle the business operations that support them.

We are seeking an Infrastructure Systems Architect to own architectural oversight of the systems that manage, monitor, and secure a device ecosystem of approximately 50,000 endpoints supporting 20,000+ users across 1,500+ locations for a large dental services organization (DSO) and affiliated medical services businesses.

This is a senior individual contributor role that is equal parts architecture and hands-on engineering: the successful candidate will help define the target-state design for fleet management, telemetry, and automation platforms, and then help build the integrations, services, and tooling that make that design real.

The majority of the scope centers on enterprise endpoint management and monitoring at scale. The role also extends to the platforms and workstations that run clinical applications and connected clinical devices, including digital X-ray, CBCT imaging, and intraoral 3D scanning systems.

The ideal candidate has built and supported scalable, enterprise-grade device fleet management and observability systems, writes production-quality code, and has led large-scale device deployment and integration programs.

This role provides architectural oversight and advanced technical support to the Endpoint Engineering, Field Support, Implementation, Network and Imaging Modality teams, and serves as the final technical authority for fleet management systems design.

Key Responsibilities

Architecture & Strategy

Champion the effort to define the target-state architecture, standards, design patterns, and roadmap for endpoint management, telemetry, inventory, patching, and remote support platforms.

Establish architectural governance: design review processes, architecture decision records, non-functional requirements, and exception handling.

Evaluate current state commercial endpoint management, RMM, and observability platforms to identify gaps and opportunities to upgrade or augment functionality with custom tooling. Lead proof-of-concept work and build-vs-buy analyses with TCO and operational-burden reasoning.

Design for scale and resilience: multi-tenant/multi-brand separation, safe and effective rollouts.

Partner with Security and Infrastructure leadership to align fleet architecture with Zero Trust principles, conditional access, device compliance posture, and least-privilege models.

Produce and maintain authoritative documentation: architecture diagrams, data flows, integration contracts, runbooks, and roadmaps.

Hands-On Engineering & Development

Design and build the tooling, APIs, connectors, and automation frameworks that integrate endpoint management platforms with ITSM, CMDB, identity, asset, and location data systems of record.

Write production-quality code in .NET, Go, Python, and JavaScript/TypeScript for agents, microservices, orchestration jobs, and internal tooling.

Collaborate with observability team to help build device telemetry and observability that provide accurate real-time fleet health, compliance, and inventory reporting.

Develop self-healing and remediation automations that detect and corrects failed policy or application deployments and configuration non-compliance without human intervention.

Implement CI/CD, infrastructure-as-code, testing, and release management practices for all fleet management tooling and configuration artifacts.

Prototype and harden new capabilities before transitioning them to the Endpoint Engineering and Operations teams for day-to-day ownership.

Deployment & Integration Programs

Lead the implementation of best practices for fleetwide safe and effective application deployments.

Provide architectural oversight for large-scale device deployment, refresh, migration, and DeNovo/acquisition integration programs.

Help design zero-touch provisioning, imaging, and enrollment workflows that allow field and third-party technicians to deploy devices consistently with minimal specialized skill.

Define the technical integration playbook for acquired practices and new-build locations, including device onboarding, standards conformance, and remediation of non-standard estates.

Clinical Systems Scope

Extend fleet management, monitoring, and patching standards to workstations and appliances that host clinical applications and connected clinical devices, including digital X-ray, CBCT, and intraoral 3D scanning systems.

Design management approaches for constrained or vendor-controlled clinical endpoints, balancing security and patch currency against vendor support requirements and clinical uptime.

Ensure fleet management designs support HIPAA safeguards and appropriate handling of systems that touch protected health information.

Leadership & Advanced Support

Serve as the final escalation point for complex, cross-domain technical issues involving application deployments, device management, telemetry, and integration systems.

Mentor Principal, Senior, and mid-level engineers in system design, software engineering practice, automation, and documentation rigor.

Participate in cross-functional design and readiness reviews ensuring solutions meet enterprise SLAs, security requirements, and supportability standards.

Translate technical direction into clear recommendations and trade-offs for leadership teams.

Skills & Qualifications

Education: Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field (or equivalent work experience).

Experience: 10+ years in systems architecture, platform engineering, or software engineering roles, including significant experience designing and operating device fleet management and monitoring systems at enterprise scale (10,000+ devices; 50,000+ preferred) across a highly distributed, multi-site footprint.

Technical Skills

Experience with endpoint agent architecture and lifecycle: deployment, versioning, health monitoring, and safe rollback across a large fleet.

Strong, current application development experience with production code in one or more major programming languages or frameworks (.NET/C#, Go, Python, and JavaScript/TypeScript).

Proven design and delivery of distributed, service-oriented systems: REST/gRPC APIs, message queues and event-driven patterns, relational and time-series data stores, caching, and secure secrets management.

Familiarity with commercial endpoint management platforms — Microsoft Intune, Autopilot, MECM/SCCM, and JAMF.

Monitoring and observability tooling and practice (e.g., Grafana, Prometheus or equivalent), including metrics, logging, alerting design, and alert-fatigue management.

Cloud platform experience (Azure & GCP preferred; AWS acceptable), containerization, and infrastructure-as-code (Terraform or equivalent).