Endpoint Engineer Microsoft Intune

Job Summary

We are seeking a hands-on Systems Engineer Workplace Engineering to support enterprise Windows endpoints, with a primary focus on Microsoft Intune, Windows patching, application packaging, software deployment, compliance, and vulnerability remediation.

The ideal candidate is an experienced endpoint engineer who can independently manage recurring operational activities, troubleshoot deployment issues, and collaborate effectively with Cybersecurity, Service Desk, and application teams.

MUST HAVE Skills

• 6+ years of hands-on Microsoft Intune experience in an enterprise Windows environment
• 8 years of Endpoint/Desktop Engineering or Systems Administration experience
• Strong experience with Windows 10/11 patching, deployment rings, compliance, and remediation
• Hands-on Win32 application packaging and deployment using Intune
• Experience creating and troubleshooting .intunewin packages, detection rules, requirements, dependencies, supersedence, assignments, and uninstall processes
• Strong Windows 11 administration and troubleshooting
• Working knowledge of Microsoft Entra ID, device identity, groups, and assignments
• PowerShell scripting for deployment, detection, remediation, automation, and troubleshooting
• Experience with endpoint vulnerability remediation and working with Cybersecurity teams
• Experience with change, release, and incident management processes
• Strong troubleshooting, documentation, communication, and follow-through skills

Key Responsibilities

• Manage monthly Windows security and quality patching through Microsoft Intune.
• Configure deployment rings, scheduling, monitoring, compliance reporting, and exception handling.
• Troubleshoot failed, stalled, and non-compliant patch deployments.
• Package, test, deploy, update, and retire Windows applications through Intune Win32 apps.
• Troubleshoot application installation and deployment failures.
• Manage Intune configuration profiles, compliance policies, device groups, assignments, and endpoint health.
• Support Windows 11 enrollment, provisioning, and Autopilot activities.
• Identify and remediate endpoint vulnerabilities in partnership with Cybersecurity.
• Develop and maintain PowerShell scripts for deployment and remediation.
• Investigate escalated endpoint issues and engage senior engineers when required.
• Maintain technical documentation, packaging standards, test evidence, and deployment records.
• Provide status updates on patch compliance, deployments, vulnerabilities, risks, and remediation.
• Windows Autopilot and modern device provisioning
• Microsoft Defender for Endpoint
• Vulnerability management tools such as Tenable, Qualys, or Rapid7
• Windows security baselines and endpoint hardening
• Application packaging tools and packaging automation
• Microsoft MD-102 certification
• ITIL and enterprise change-control experience

Education

Bachelor s degree in IT, Computer Science, or related field