Senior Microsoft Intune Engineer (macOS, Apple, & Windows Engineering Specialist)

Senior Microsoft Intune Architect (macOS, Apple, & Windows Engineering Specialist)

Duration: 12 Months +

Bridgewater, NJ ( 3 days onsite)

12 Months+ | 40,000+ Devices

We are seeking a hands-on Engineer to lead the design, implementation, and engineering of an enterprise-grade Apple and Windows management environment within Microsoft Intune. You will own the technical strategy for a massive, dual-platform fleet (macOS and Windows), ensuring seamless integration with Apple Business Manager, Windows Autopilot, and modern deployment workflows across a large global tenant.

Key Responsibilities

• Design and lead the technical architecture for both macOS/iOS (leveraging Apple Business Manager and Automated Device Enrollment) and Windows 10/11 endpoints within a unified Microsoft Intune environment.
• Drive the engineering strategy for the Windows fleet, including advanced Group Policy (GPO) migration to Intune, Co-Management strategies, Configuration baselines, and custom Administrative Templates (ADMX).
• Implement Declarative Device Management (DDM) and Platform SSO for macOS, while simultaneously scaling Windows Autopilot for a true "Zero Touch" deployment across all hardware types.
• Design configuration profiles (system extensions, kernel extensions, TCC) and custom scripts (Shell, Bash, and PowerShell) to manage complex macOS and Windows settings not natively available in the Intune UI.
• Drive the end-to-end strategy for application packaging and deployment across both platforms using PKG, DMG, and VPP for Mac, alongside MSI, MSIX, Win32 apps (IntuneWin), and third-party patching tools for Windows.
• Integrate Intune with Azure AD (Entra ID) and Conditional Access to enforce strict compliance-based access control for both Apple and Windows endpoints.
• : Establish rigorous endpoint security controls including FileVault for Mac, BitLocker encryption for Windows, Microsoft Defender for Endpoint across all platforms, and Gatekeeper/AppLocker management.

Qualifications

• 5+ years of experience architecting Microsoft Intune specifically for both macOS and Windows at a massive enterprise scale (10,000+ nodes per platform).
• Expert-level understanding of Windows 10/11 architecture, Windows Autopilot, Windows Update for Business (WUfB), Delivery Optimization, and registry/GPO management.
• Deep Knowledge: Expert-level understanding of Apple-specific frameworks (APNs, ADE, VPP, and Configuration Profiles).
• Highly proficient in PowerShell for Intune/Graph API automation and Windows customization, as well as Bash/Zsh for macOS customization.
• Security: Strong background in Microsoft Defender for Endpoint and Conditional Access.
• Environment: Experience in Manufacturing/Lab environments is a plus.