Intune Platform Engineer

Intune Platform Engineer
Experience: 8-10 Years | Function: IT / Modern Endpoint Management | Employment Type: Full Time /
Remote

Mandatory Areas
Must Have Skills -
Skill 1 - Yrs of Exp - Microsoft Intune
Skill 2 - Yrs of Exp - microsoft defender
Skill 3 - Yrs of Exp - Modern end point management
Skill 4 - Yrs of Exp -,windows autopilot

About the Role
We are looking for a seasoned Intune Platform Engineer to lead and drive our Modern Endpoint Management (MEM) program. This is a hands-on, architecture-level role where you will own the design, configuration, and continuous improvement of our Microsoft Intune environment spanning device enrollment, security policies, software delivery, and end-to-end endpoint compliance. You will collaborate closely with security, infrastructure, and service management teams to deliver a seamless and secure digital workplace experience.

Key Responsibilities
• Architect, design, and implement end-to-end Microsoft Intune solutions aligned with enterprise security and compliance standards.
• Lead and manage the Windows Autopilot program, including profile configuration, deployment modes, and device onboarding workflows.
• Configure and manage Windows Autopatch to automate patch management and ensure devices remain current and compliant.
• Administer Windows Update for Business policies, including update rings, feature updates, and quality update strategies.
• Drive the organization's migration to Intune MDM & MAM, including enrollment strategies, policy configuration, and legacy platform decommissioning.
• Design and enforce Mobile Device Management (MDM) and Mobile Application Management (MAM) policies across Windows, iOS, and Android platforms.
• Develop and maintain Conditional Access policies in collaboration with the Identity & Security team to enforce Zero Trust principles.
• Configure and manage MAM App Protection Policies for both enrolled and unenrolled devices.
• Lead the organization's Passwordless authentication initiatives using solutions such as Windows Hello for Business, FIDO2 keys, and Microsoft Authenticator.
• Manage software packaging and application deployment through Intune, including Win32 apps, LOB apps, Microsoft Store apps, and web links.
• Define and maintain endpoint compliance policies and remediation workflows to ensure device health across the fleet.
• Develop and maintain PowerShell scripts for automation of Intune configurations, reporting, and remediation tasks.
• Build and manage API integrations between Intune/Microsoft Graph API and platforms such as ServiceNow for ITSM workflows, asset management, and automated ticketing.
• Monitor endpoint health, policy compliance, and deployment status through Intune reports and Microsoft Endpoint Analytics.
• Develop and maintain documentation including architecture diagrams, runbooks, and standard operating procedures. Stay current with Microsoft Intune product updates, roadmap changes, and industry best practices.
• Agentic Ai knowledge and enabling Ai capabilities across the endpoint management services.

Required Skills & Qualifications
• 8-10 years of overall IT experience with a strong focus on Microsoft Intune / Microsoft Endpoint Manager.
• Deep hands-on expertise in:
o Windows Autopilot (White Glove, self-deploying, user-driven modes)
o Windows Autopatch & Windows Update for Business
o MDM & MAM policy management (Windows, iOS, Android)
o Conditional Access and Azure AD / Entra ID integration
o Passwordless authentication (WHfB, FIDO2, Authenticator App)
o App packaging and deployment (Win32, MSIX, LOB, scripts)
o Endpoint compliance and remediation policies Proficiency in PowerShell scripting for automation, reporting, and device management.
• Experience with Microsoft Graph API and REST API integrations.
• Hands-on experience integrating Intune with ServiceNow or similar ITSM platforms.
• Strong understanding of Azure Active Directory / Entra ID, Identity Protection, and Zero Trust security frameworks.
• Familiarity with Microsoft Defender for Endpoint and its integration with Intune for threat-based compliance.
• Experience with co-management scenarios (Intune + Configuration Manager / SCCM) is a plus.

Preferred Certifications
Microsoft Certified: Endpoint Administrator Associate (MD-102)
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
ITIL Foundation (preferred)
Soft Skills
Team Collaboration: Ability to work effectively across cross-functional teams including Security, IT Operations, Helpdesk, and Business stakeholders.

Project Management: Capable of managing multiple workstreams simultaneously, meeting deadlines, and driving projects from planning through execution.

Continuous Learner: Proactive in staying up to date with the evolving Microsoft 365 and Intune ecosystem; embraces change and new technologies.

Communication & Presentation: Ability to clearly articulate technical concepts to both technical peers and non-technical leadership; comfortable presenting to stakeholders and in steering committee settings. Problem Solving: Strong analytical mindset with the ability to troubleshoot complex endpoint and policy issues independently.

Ownership & Accountability: Self-driven professional who takes initiative and sees tasks through to completion.