Microsoft Intune / Windows Endpoint Management Contractor

Title : Microsoft Intune / Windows Endpoint Management Contractor
Location : Remote
Job Type : Contract (6 Months)
Compensation : $75.19 - $93.98/hr
Industry: Retail
---
About the Role
We are partnering with a leading national retail organization to identify an experienced Microsoft Intune and Windows Endpoint Management Contractor to support a large-scale endpoint modernization initiative. Operating within one of the country's most recognizable retail brands, this engagement offers the opportunity to shape endpoint strategy across a highly complex, enterprise-scale Windows environment supporting thousands of team members across corporate, distribution, and store-support functions. The contractor will play a critical role in migrating a traditional Active Directory–joined device fleet to a fully modern, Microsoft Entra ID–joined and Intune-managed environment — without implementing Hybrid Entra ID Join. Job Description
The contractor will lead the technical planning, implementation, automation, and documentation efforts required to migrate a complex Windows environment from Active Directory domain-joined devices to Microsoft Entra ID–joined devices managed by Microsoft Intune. The environment includes multiple Active Directory domains, numerous Group Policy Objects (GPOs), shared-device scenarios, and a diverse application portfolio. This role emphasizes modernization, automation, and risk mitigation while minimizing user disruption throughout the migration lifecycle.
Key Responsibilities:

• Current-State Assessment: Assess Active Directory environments across multiple domains; review Organizational Units (OUs), GPOs, login scripts, scheduled tasks, and local administrative configurations; identify policies and configurations to migrate, modernize, or retire; and evaluate existing endpoint management processes and operational dependencies.
• Intune & Entra ID Migration: Design and support Microsoft Entra ID Join implementation and Intune device management; configure Windows Autopilot; develop compliance, configuration, and endpoint security policies; support application deployment and lifecycle management; design migration waves and deployment strategies; and establish enrollment and provisioning standards.
• User Profile Migration: Develop strategies to preserve user profiles during migration from Active Directory identities to Entra ID identities; minimize disruption caused by profile and SID changes; evaluate profile migration tools and methodologies; and validate preservation of user data, desktop settings, browser profiles, application settings, and certificates where applicable.
• Automation & Deployment: Develop PowerShell automation for device assessment, readiness validation, enrollment workflows, Autopilot registration, device migration, and reporting/monitoring; build repeatable deployment processes; and create post-migration validation procedures.
• Risk Management: Identify technical and operational migration risks; develop rollback and recovery procedures; create re-enrollment and break-glass processes; and support pilot deployments and production rollout planning.
• Windows Endpoint Administration: Administer and troubleshoot Windows 10 and Windows 11 devices; configure Compliance Policies, Configuration Profiles, Endpoint Security Policies, Windows Update for Business, application deployment, and security baselines; and support Windows Autopilot reset and reprovisioning.
• Documentation & Knowledge Transfer: Produce technical documentation and operational runbooks; document migration procedures and support processes; deliver knowledge transfer to internal IT teams; and document long-term operational support requirements.

Deliverables Include:

• Current-state assessment and gap analysis
• GPO-to-Intune mapping matrix
• Target-state Intune and Entra ID architecture
• User profile migration strategy
• PowerShell automation framework
• Windows Autopilot deployment design
• Pilot migration plan and results
• Rollback and recovery procedures
• Device re-enrollment and reprovisioning runbooks
• Final technical documentation and knowledge transfer materials

Qualifications
Required Qualifications:

• Enterprise Microsoft Intune administration experience
• Microsoft Entra ID Join experience
• Active Directory and Group Policy administration
• Proven experience translating GPOs into Intune policies
• Windows 10 and Windows 11 endpoint administration
• Advanced PowerShell scripting and automation skills
• Windows Autopilot deployment and provisioning experience
• Enterprise endpoint migration experience
• Microsoft Graph integration experience for automation or administration

Preferred Qualifications:

• User profile migration experience during Active Directory to Entra ID transitions
• Shared-device and multi-user device management
• Conditional Access and Dynamic Groups
• Windows Update for Business
• Microsoft Defender for Endpoint
• Windows LAPS
• Graph API experience
• Consulting or contractor experience in enterprise environments
• Strong documentation and communication skills
• Demonstrated success delivering one or more enterprise migrations from Active Directory–managed Windows devices to Microsoft Entra ID and Microsoft Intune

Benefits
Dahl Consulting is proud to offer a comprehensive benefits package to eligible employees that will allow you to choose the best coverage to meet your family’s needs. For details, please review the DAHL Benefits Summary:  How to Apply
Take the first step on your new career path!  To submit yourself for consideration for this role, simply click the apply button and complete our mobile-friendly online application. Once we’ve reviewed your application details, a recruiter will reach out to you with next steps! Equal Opportunity Statement
As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!

#LI-CF1
#LI-Remote