InTune Architect

Role Description

MKS2 is seeking an experienced Intune Architect to support the TALON Program under Accenture Federal Services (AFS). This role will lead the design and implementation of a large-scale Microsoft Intune architecture, supporting Windows, iOS/iPadOS, and Android environments. The architect will drive modern endpoint management, security compliance, and Blackberry UEM to Intune migration efforts while partnering with Security, Identity, Networking, and Engineering teams to deliver a Zero Trust-aligned endpoint platform.

Key Responsibilities

• Design and implement enterprise Microsoft Intune architecture and governance.
• Lead Blackberry UEM to Intune migration strategy and SCCM/Configuration Manager co-management initiatives.
• Develop device compliance policies, configuration profiles, application deployment standards, and update management strategies.
• Design Conditional Access, security baselines, BitLocker governance, and Defender for Endpoint integrations.
• Architect Entra ID device identity, authentication, and access management solutions.
• Develop PowerShell automation, reporting, and configuration-as-code practices.
• Lead pilot deployments, migration waves, executive briefings, and stakeholder communications.
• Create technical standards, architecture documentation, and operational procedures.

Qualifications

• Minimum 8 years of experience in endpoint management, systems engineering, or related field.
• 3+ years architecting Microsoft Intune solutions in enterprise environments.
• Expert knowledge of:
  • Microsoft Intune
  • Autopilot
  • Device Compliance & Configuration Profiles
  • Application Lifecycle Management (Win32, MSIX, MAM)
  • RBAC and Scope Management
• Experience with:
  • Conditional Access
  • Microsoft Defender for Endpoint
  • Entra ID (Azure AD)
  • SCCM/Configuration Manager Co-Management
  • PowerShell Automation
  • MDM/MAM Administration
• Strong experience leading large-scale enterprise endpoint modernization projects.

Preferred Qualifications

• Experience supporting federal agencies or Public Trust environments.
• Knowledge of Zero Trust architecture and NIST 800-53 controls.
• Experience with FedRAMP and ATO processes.
• Advanced expertise with:
  • Defender for Endpoint
  • KQL and Log Analytics
  • Attack Surface Reduction (ASR)
  • Certificate Management (SCEP/PKCS)
  • Wi-Fi and VPN Architecture
• Experience with Terraform, Bicep, Git-based governance, and Infrastructure as Code.
• Strong incident response, disaster recovery, and change management experience.

Clearance

• Must be eligible to obtain and maintain a Public Trust clearance or higher.