Job description

Key Responsibilities - Intune Implementation & Co-Management: Lead the design and implementation of Intune-based device management solutions, ensuring alignment with client security, compliance, and user experience goals​. Integrate Intune with on-premises SCCM (Microsoft Endpoint Configuration Manager) for co-management of Windows 10/11 devices as needed, to bridge traditional and modern management approaches. - Mobile Device Management (MDM): Configure and manage mobile devices (iOS and Android) through Intune, enforcing compliance policies and application protection to safeguard corporate data​. Provide guidance on mobile device policy creation, including best practices for BYOD vs. corporate-owned devices, to ensure secure and consistent device configurations. - Desktop Compliance & Security: Enforce desktop endpoint compliance and security configurations via Intune (and co-managed SCCM). This includes deploying configuration profiles, security baselines, software updates, and device compliance policies to maintain a secure Windows client environment​. Continuously monitor and remediate compliance issues to meet organizational security standards. - Dynamic Group Management: Leverage Azure AD dynamic groups to automatically organize users and devices based on attributes, which simplifies policy assignments and software deployments​. By using dynamic groups, ensure that devices (e.g. by platform, department, or compliance state) are appropriately targeted by Intune policies without manual group upkeep. - Automation & Scripting: Develop automation scripts and runbooks (PowerShell/Azure Automation) to streamline repetitive endpoint management tasks​. Use scripting to generate compliance reports, perform bulk changes, and integrate Intune with other services, improving operational efficiency and consistency in device management. - Client Training & Knowledge Transfer: Provide expert guidance and mentorship to client IT teams. Conduct training sessions and hands-on knowledge transfer so that staff can effectively manage and support the Intune environment post-engagement​. Create documentation and best practice guides tailored to the client’s environment to facilitate a smooth handover. Required Skills - Intune & SCCM Experience: 3+ years of experience in enterprise endpoint management with Microsoft Intune and SCCM (ConfigMgr), with proven expertise in Intune hybrid management including co-management with SCCM​. Demonstrated history of deploying and managing Intune in large-scale environments. - Intune Policy Administration: Hands-on experience implementing Intune policies and configurations across Windows, iOS, and Android devices (e.g. device compliance policies, configuration profiles, app protection policies, and Windows Autopilot provisioning)​. Familiarity with macOS management via Intune is a plus. - Azure AD & Security: Strong knowledge of Azure Active Directory (Entra ID) and Conditional Access, with a solid understanding of Microsoft 365 endpoint security and compliance features​. Able to design policies that meet Zero Trust security standards and protect data across devices. - Scripting & Automation: Proficiency in PowerShell scripting for automation of administrative tasks, and experience creating or utilizing Azure Automation runbooks​. Ability to automate Intune processes (for example, bulk device actions or periodic compliance audits) to improve efficiency. - Client-Facing Communication: Excellent communication and client-facing skills, with the ability to lead technical workshops and requirement-gathering sessions. Proven experience translating business needs into technical solutions​ and delivering end-user or admin training for knowledge transfer.

Requirements