Intune Windows 365 Engineer

Job#: 3034091

Job Description:

Microsoft Intune & Windows 365 Customer Engineer

Client: Microsoft

Location: HYBRID - Mostly remote work but will need to be willing to work at client site as needed.

Contract: Long term - no tenure limit

Customer site address: 100 W 1st St. Los Angeles, CA 90012

These are CSA "Cloud Solution Architect" roles on a Global Delivery CS team. You would be a W2 Apex Systems employee and a Microsoft consultant/contractor on a MULTI YEAR contract basis with no end date.

Serve as the trusted advisor for Microsoft customers

Lead technical workshops, health checks, and product reviews

Deliver best practices and strategic guidance to enterprise customers

Role Overview

We are seeking an experienced Microsoft Intune & Windows 365 Customer Engineer to deliver modern endpoint and Cloud PC solutions for enterprise customers. This role is Windows-centric, with strong focus on Windows 10/11, Windows 365, identity-driven access, and endpoint security, supported by Microsoft Intune.

The ideal candidate has hands-on experience designing, deploying, and operating Windows 365 Cloud PCs at scale, integrating Intune, Microsoft Entra ID, and Conditional Access to deliver secure, performant, and reliable end-user experiences.

Key Responsibilities

• Design, implement, and support Microsoft Intune and Windows 365 solutions for enterprise customers.
• Act as a customer-facing engineer, delivering deployments, migrations, and operational support.
• Provide architectural guidance and hands-on execution for Cloud PC and modern Windows management scenarios.

Windows 365 (Primary Focus)

• Design and deploy Windows 365 Cloud PCs, including:
  • Business, Enterprise, and Frontline offerings
  • Provisioning policies and device assignment strategies
  • Image management and lifecycle planning
• Demonstrate strong understanding of Windows 365 licensing and SKUs, including:
  • Windows 365 Business vs Windows 365 Enterprise capabilities and limitations
  • Frontline Cloud PC scenarios (dedicated vs shared usage models)
  • Cloud PC sizing considerations (vCPU, RAM, storage) aligned to user personas and workloads
  • Licensing prerequisites and dependencies (Intune, Entra ID, Windows Enterprise, Hybrid Benefit)
• Configure and support:
  • Connectivity models (Microsoft-hosted and Azure Network Connection)
  • Performance optimization and end-user experience troubleshooting
  • Access scenarios across multiple device types
• Integrate Windows 365 with:
  • Microsoft Intune for device management
  • Microsoft Entra ID for identity and access
  • Conditional Access and Zero Trust controls
• Troubleshoot Cloud PC provisioning issues, sign-in failures, performance concerns, and policy application problems.
• Support migration scenarios from:
  • Traditional physical desktops
  • On-premises VDI or third-party DaaS solutions

Windows Endpoint & Intune Management

• Implement and support Windows 10/11 management using Intune, including:
  • Windows Autopilot (User-Driven, Pre-Provisioning)
  • Windows Autopatch
  • Update rings, Feature Updates, and Quality Updates
• Configure Endpoint Security policies:
  • Microsoft Defender Antivirus
  • Firewall, ASR rules, and BitLocker
  • Security Baselines
• Deploy and manage applications (Win32, Store, Microsoft 365 Apps).
• Design compliance policies and integrate with Conditional Access.
• Leverage Intune Suite features such as:
  • Remote Help
  • Endpoint Analytics
  • Endpoint Privilege Management

Identity, Access & Security

• Strong experience with Microsoft Entra ID.
• Implement and troubleshoot:
  • Single Sign-On (SSO)
  • Conditional Access policies aligned with Zero Trust principles
• Understanding of device trust, compliance-based access, and identity-driven endpoint management models.

Troubleshooting & Automation

• Troubleshoot complex issues across:
  • Windows endpoints
  • Intune
  • Windows 365 Cloud PCs
• Analyze logs and diagnostics using:
  • Intune troubleshooting tools
  • Event Viewer and MDMDiagnosticsTool
• Automate operational tasks using PowerShell and Microsoft Graph (preferred).
• Maintain clear customer-ready documentation and handover guidance.

Required Skills & Experience

• Strong hands-on experience with Microsoft Intune and Windows endpoint management.
• Demonstrated experience deploying and supporting Windows 365 Cloud PCs.
• Expertise in:
  • Windows Autopilot and Autopatch
  • Endpoint Security and compliance
  • Conditional Access and identity-driven controls
• Experience supporting enterprise customers in a partner, MSP, or consulting environment.
• Excellent troubleshooting, communication, and customer engagement skills.

Nice to Have

• Experience managing iOS/iPadOS, Android Enterprise, or macOS using Intune.
• Familiarity with MAM / App Protection Policies.
• Migration experience from third-party MDM, VDI, or DaaS platforms.
• Microsoft certifications related to Endpoint, Security, or Azure Virtual Desktop.

SCCM/Configuration Manager experience

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico. Everforth Apex uses a virtual recruiter as part of the application process. Click for more details.

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.