Microsoft Intune Engineer / Endpoint Management Specialist

We are seeking a highly skilled Microsoft Intune Engineer / Endpoint Management Specialist to lead and evolve our enterprise endpoint management strategy. This role will serve as the subject matter expert for Microsoft Intune and Microsoft Endpoint Manager, ensuring secure, compliant, and scalable device management across Windows, macOS, iOS, and Android environments.

You will own device policy lifecycle, lead deployment testing strategies, and drive consistent, reliable endpoint experiences across the organization.

Key Responsibilities

• Design, deploy, and manage endpoint policies using Microsoft Intune across Windows, macOS, iOS, and Android
• Own end-to-end device policy lifecycle: authoring, testing, versioning, and retirement
• Lead deployment testing strategy, including staged rollouts, pilot groups, and rollback planning
• Manage application deployment and lifecycle through Company Portal
• Maintain OS patching and application updates using Intune update rings
• Implement and manage Conditional Access policies via Microsoft Entra ID
• Support Zero Trust security initiatives and device compliance posture
• Manage device lifecycle: provisioning, enrollment, configuration, and decommissioning
• Develop and maintain Autopilot and Apple Business Manager (ABM/DEP) workflows
• Troubleshoot endpoint issues: enrollment failures, policy conflicts, compliance gaps
• Partner with Security and Compliance teams to align endpoint posture with standards
• Create and maintain technical documentation, SOPs, and deployment test results
• Automate processes using PowerShell scripting
• Evaluate and recommend new Microsoft 365 endpoint capabilities
• Provide escalation support and mentor junior team members

Required Qualifications

• 3+ years of hands-on experience with Microsoft Intune in enterprise environments
• Strong knowledge of MDM/MAM policies across Windows, macOS, iOS, and Android
• Proven experience managing endpoint policies at scale (policy conflicts, scope tags, deployment rings)
• Experience designing and executing deployment testing strategies (pilot groups, staged rollouts)
• Hands-on experience with Microsoft Entra ID and Conditional Access
• Experience with Windows Autopilot and Apple Business Manager / DEP
• Knowledge of certificate management (SCEP, PKCS) and Wi-Fi/VPN configuration
• Proficiency in PowerShell scripting
• Familiarity with security frameworks (CIS, NIST, Microsoft Security Baselines)
• Experience with ITSM tools such as ServiceNow or Jira
• Understanding of change management processes (CAB, RFC, etc.)