Microsoft Intune Endpoint Management Engineer

JOB SUMMARY:

The Microsoft Intune Endpoint Management Engineer serves as the Subject Matter Expert (SME) for enterprise device management using Microsoft Intune across Windows, iOS, Android, and macOS platforms. The role focuses on advanced troubleshooting, endpoint security management, and device lifecycle automation. The engineer is responsible for designing and optimizing the Intune environment, leading SCCM to Intune migration initiatives, implementing Zero Trust security policies, and ensuring device compliance and operational reliability across the organization.

Key Responsibilities

• Serve as the SME for Microsoft Intune device management across Windows, iOS, Android, and macOS platforms.
• Act as the L3 escalation point for complex issues escalated from L1 and L2 support teams.
• Perform advanced troubleshooting and Root Cause Analysis (RCA) for device enrollment failures, policy conflicts, compliance issues, and application deployment problems.
• Design and optimize the Intune environment for scalability, performance, and alignment with Zero Trust security principles.
• Lead SCCM to Intune migration projects , including analysis of existing SCCM applications, policies, baselines, and collections.
• Convert SCCM configuration baselines and Group Policy Objects (GPOs) into Intune configuration profiles and compliance policies.
• Automate processes using Microsoft Graph API and PowerShell for configuration, reporting, and operational efficiency.
• Implement and manage advanced security controls such as Conditional Access, BitLocker, Defender for Endpoint, and app protection policies .
• Manage the complete device lifecycle , including Autopilot deployment, Android Enterprise management, configuration profiles, updates, patching, and application distribution.
• Ensure endpoint security, compliance, and reliability across all managed devices and operating systems.
• Mentor L1/L2 engineers and provide guidance on Intune best practices and troubleshooting strategies .
• Maintain technical documentation including runbooks, operational procedures, and training materials.

Required Skills & Experience

• Strong hands-on experience with Microsoft Intune and Endpoint Manager .
• Experience managing Windows, macOS, iOS, and Android devices in enterprise environments.
• Experience with SCCM (Microsoft Endpoint Configuration Manager) and migration to Intune.
• Strong troubleshooting skills related to device enrollment, compliance policies, and application deployments .
• Experience implementing Conditional Access policies and endpoint security frameworks .
• Experience with PowerShell scripting and Microsoft Graph API automation .
• Strong understanding of Zero Trust security architecture .
• Experience managing Autopilot deployments and Android Enterprise configurations .
• Knowledge of endpoint security controls including BitLocker and Defender for Endpoint .

Competencies

• Strong analytical and problem-solving skills.
• Ability to manage enterprise endpoint environments with high reliability.
• Strong communication and documentation skills.
• Ability to mentor junior engineers and lead technical initiatives.
• Ability to work in fast-paced enterprise environments with complex infrastructure.

Preferred Skills

• Microsoft certifications such as Microsoft Certified: Endpoint Administrator Associate (MD-102) .
• Experience with Azure AD / Microsoft Entra ID identity management .
• Experience implementing Zero Trust architecture in enterprise environments.
• Experience working with enterprise security compliance frameworks .