Infrastructure Systems Architect

The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S., supporting over 23,000 healthcare professionals and team members at more than 1,150 locations across 48 states. Our five supported healthcare practices operate under the brands Aspen Dental, ClearChoice, WellNow, Chapter Aesthetic Studio, and Lovet. We’re committed to enabling healthcare professionals to focus on patient care while we handle the business operations that support them.

We are seeking an Infrastructure Systems Architect to own architectural oversight of the systems that manage, monitor, and secure a device ecosystem of approximately 50,000 endpoints supporting 20,000+ users across 1,500+ locations for a large dental services organization (DSO) and affiliated medical services businesses. This is a senior individual contributor role that is equal parts architecture and hands-on engineering: the successful candidate will help define the target-state design for fleet management, telemetry, and automation platforms, and then help build the integrations, services, and tooling that make that design real.

The majority of the scope centers on enterprise endpoint management and monitoring at scale. The role also extends to the platforms and workstations that run clinical applications and connected clinical devices, including digital X-ray, CBCT imaging, and intraoral 3D scanning systems. The ideal candidate has built and supported scalable, enterprise-grade device fleet management and observability systems, writes production-quality code, and has led large-scale device deployment and integration programs.

This role provides architectural oversight and advanced technical support to the Endpoint Engineering, Field Support, Implementation, Network and Imaging Modality teams, and serves as the final technical authority for fleet management systems design.
Key Responsibilities:
Architecture & Strategy

- Champion the effort to define the target-state architecture, standards, design patterns, and roadmap for endpoint management, telemetry, inventory, patching, and remote support platforms.

- Establish architectural governance: design review processes, architecture decision records, non-functional requirements, and exception handling.

- Evaluate current state commercial endpoint management, RMM, and observability platforms to identify gaps and opportunities to upgrade or augment functionality with custom tooling. Lead proof-of-concept work and build-vs-buy analyses with TCO and operational-burden reasoning.

- Design for scale and resilience: multi-tenant/multi-brand separation, safe and effective rollouts.

- Partner with Security and Infrastructure leadership to align fleet architecture with Zero Trust principles, conditional access, device compliance posture, and least-privilege models.

- Produce and maintain authoritative documentation: architecture diagrams, data flows, integration contracts, runbooks, and roadmaps.

Hands-On Engineering & Development

- Design and build the tooling, APIs, connectors, and automation frameworks that integrate endpoint management platforms with ITSM, CMDB, identity, asset, and location data systems of record.

- Write production-quality code in .NET, Go, Python, and JavaScript/TypeScript for agents, microservices, orchestration jobs, and internal tooling.

- Collaborate with observability team to help build device telemetry and observability that provide accurate real-time fleet health, compliance, and inventory reporting.

- Develop self-healing and remediation automations that detect and corrects failed policy or application deployments and configuration non-compliance without human intervention.

- Implement CI/CD, infrastructure-as-code, testing, and release management practices for all fleet management tooling and configuration artifacts.

- Prototype and harden new capabilities before transitioning them to the Endpoint Engineering and Operations teams for