Job description

We are seeking a highly skilled Intune & Endpoint Security Engineer to implement advanced security features in Microsoft Intune and support Microsoft Endpoint Configuration Manager (MECM). The engineer will lead the migration of workloads from MCM to Intune, ensuring all policies and configurations are applied efficiently. This role requires close collaboration with Azure, Identity Management teams, and other internal stakeholders. The engineer will provide day-to-day support for 14 managed agencies and several non-managed agencies, implementing MDM solutions and supporting existing and new Intune security features as outlined in our Intune roadmap (2024–2027). Key Responsibilities: • Manage and secure devices across multiple platforms and deploy/manage applications to ensure secure access to corporate resources. • Implement endpoint security policies, including antivirus, device encryption, conditional access, and compliance configurations. • Work with Azure AD, On-Prem AD, Exchange Online, SharePoint, Teams, and other M365 services to provide unified endpoint management and enhance security. • Lead migration from Microsoft Configuration Manager (MCM) to Intune, including policies, workloads, and compliance profiles. • Develop and maintain PowerShell and Bash scripts to automate tasks, optimize deployments, and improve security compliance. • Troubleshoot and resolve complex incidents, provide major incident support, and mentor junior team members. • Maintain detailed documentation of configurations, policies, procedures, and generate reports for compliance, usage, and risk tracking. • Collaborate with internal teams and third-party vendors to drive continuous improvement and stay updated on product developments. Basic Qualifications: • Minimum 3 years hands-on experience with Microsoft Intune and M365 (Azure AD, Exchange, Teams, SharePoint). • Experience managing Hybrid Azure AD-joined domains. • Strong knowledge of device management, security policies, and application deployment. • Proficient in PowerShell and Bash scripting for automation. • Expertise in security practices such as device encryption, MFA, conditional access, and endpoint protection. • Familiarity with M365 tools, including SharePoint, Teams, Power Platform, Graph API, etc. • Knowledge of Windows Server, Active Directory, SCCM, and M365 licensing/migrations. Preferred Qualifications: • Microsoft 365 Certifications (Endpoint Administrator, Azure Fundamentals, etc.) • Prior experience working in a multi-agency or enterprise environment. • Strong communication and collaboration skills to work effectively with cross-functional teams.

Requirements