Intune Windows 365 Engineer

Microsoft Intune & Windows 365 Customer Engineer

We are seeking an experienced Microsoft Intune & Windows 365 Customer Engineer to deliver modern endpoint and Cloud PC solutions for enterprise customers. This role is Windows-centric, with a strong focus on Windows 10/11, Windows 365, identity-driven access, and endpoint security, supported by Microsoft Intune.

The ideal candidate has hands-on experience designing, deploying, and operating Windows 365 Cloud PCs at scale, integrating Intune, Microsoft Entra ID, and Conditional Access to deliver secure, performant, and reliable end-user experiences.

Key Responsibilities

• Design, implement, and support Microsoft Intune and Windows 365 solutions for enterprise customers.
• Act as a customer-facing engineer, delivering deployments, migrations, and operational support.
• Provide architectural guidance and hands-on execution for Cloud PC and modern Windows management scenarios.

Windows 365 (Primary Focus)

• Design and deploy Windows 365 Cloud PCs, including Business, Enterprise, and Frontline offerings; provisioning policies and device assignment strategies; image management and lifecycle planning.
• Demonstrate strong understanding of Windows 365 licensing and SKUs, including Windows 365 Business vs Windows 365 Enterprise capabilities and limitations; Frontline Cloud PC scenarios (dedicated vs shared usage models); Cloud PC sizing considerations (vCPU, RAM, storage) aligned to user personas and workloads; licensing prerequisites and dependencies (Intune, Entra ID, Windows Enterprise, Hybrid Benefit).
• Configure and support: connectivity models (Microsoft-hosted and Azure Network Connection); performance optimization and end-user experience troubleshooting; access scenarios across multiple device types.
• Integrate Windows 365 with Microsoft Intune for device management; Microsoft Entra ID for identity and access; Conditional Access and Zero Trust controls.
• Troubleshoot Cloud PC provisioning issues, sign-in failures, performance concerns, and policy application problems.
• Support migration scenarios from traditional physical desktops; on-premises VDI or third-party DaaS solutions.

Windows Endpoint & Intune Management

• Implement and support Windows 10/11 management using Intune, including Windows Autopilot (User-Driven, Pre-Provisioning); Windows Autopatch; update rings, Feature Updates, and Quality Updates.
• Configure Endpoint Security policies: Microsoft Defender Antivirus; Firewall, ASR rules, and BitLocker; Security Baselines.
• Deploy and manage applications (Win32, Store, Microsoft 365 Apps).
• Design compliance policies and integrate with Conditional Access.
• Leverage Intune Suite features such as Remote Help; Endpoint Analytics; Endpoint Privilege Management.

Identity, Access & Security

• Strong experience with Microsoft Entra ID.
• Implement and troubleshoot Single Sign-On (SSO); Conditional Access policies aligned with Zero Trust principles.
• Understanding of device trust, compliance-based access, and identity-driven endpoint management models.

Troubleshooting & Automation

• Troubleshoot complex issues across Windows endpoints; Intune; Windows 365 Cloud PCs.
• Analyze logs and diagnostics using Intune troubleshooting tools; Event Viewer and MDMDiagnosticsTool.
• Automate operational tasks using PowerShell and Microsoft Graph (preferred).
• Maintain clear customer-ready documentation and handover guidance.

Required Skills & Experience

• Strong hands-on experience with Microsoft Intune and Windows endpoint management.
• Demonstrated experience deploying and supporting Windows 365 Cloud PCs.
• Expertise in Windows Autopilot and Autopatch; Endpoint Security and compliance; Conditional Access and identity-driven controls.
• Experience supporting enterprise customers in a partner, MSP, or consulting environment.
• Excellent troubleshooting, communication, and customer engagement skills.

Nice to Have

• Experience managing iOS/iPadOS, Android Enterprise, or macOS using Intune.
• Familiarity with MAM / App Protection Policies.
• Migration experience from third-party MDM, VDI, or DaaS platforms.
• Microsoft certifications related to Endpoint, Security, or Azure Virtual Desktop.

SCCM/Configuration Manager experience