Intune Engineer

Job Summary 

The Intune Engineer is responsible for designing, implementing, managing, and optimizing Microsoft Intune solutions to ensure secure and efficient device and application management across various platforms. This role oversees end-user endpoints through Mobile Device Management (MDM), including patch management, vulnerability remediation, software packaging and deployment, and the administration of device profiles and policies in alignment with IT security standards. The engineer also develops and maintains Windows 10 and 11 workstation baselines and provides tier-3 support for endpoints and virtual desktop services.

Essential Job Functions *

• Deploy, configure and management of Intune for all endpoints, including Windows, macOS, iOS and Android.
• Ensure the efficient and secure operation of Intune, including monitoring performance and addressing issues.
• Create and manage Intune policies for device configurations, security settings, and application deployments.
• Deploy both line-of-business (LOB) and customer applications to devices, ensuring proper configuration and user access.
• Oversee the enrollment of devices into Intune, including Azure AD joined and hybrid Azure AD joined devices.
• Integrate Intune with Microsoft Endpoint Configuration Manager (MECM) to streamline device management and enforce compliance policies.
• Implement and enforce compliance policies for devices and applications, ensuring security standards are met.
• Collaborate with Security on design and implementation of security policies and configurations using Intune to protect endpoints.
• Provide monthly reports and metrics on health of the environment, patching, MDM, compliance, etc.
• Maintain up to date technical or training documentation and standard operating procedures.

* This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.

Employees are expected and encouraged to participate in safety and health program activities including immediately reporting hazards, immediately reporting unsafe work practices and incidents to supervisors, wearing required personal protective equipment, and participating in and supporting safety committee activities.

Education & Experience

• A bachelor’s degree in computer science, Information Technology, or a related technical field is required. (5 years of additional experience required if degree requirement not met)
• 3+ years of technical support, consulting, or IT experience with Intune and Azure AD
• Device enrollment, policy failure, and security incident troubleshooting skills
• Experience designing, implementing, and managing Microsoft Intune solutions including Auto Pilot and MDM
• Familiarity with Azure Active Directory and its integration with Intune.
• Expertise in PowerShell scripting and proficiency in other scripting languages
• Experience with migrating devices from on-premises AD+SCCM to Azure AD+Intune.
• Microsoft Certifications: Microsoft 365 Certified, Endpoint Admin Associate, Security Administrator or related. Modern Desktop Administrator (preferred, but not required).

Competencies – Knowledge, Skills and Abilities

• Proficiency in scripting languages like PowerShell. A strong problem-solving mindset.
• Excellent written and verbal communication skills to explain technical concepts and collaborate with stakeholders.
• Ability to work effectively in a team environment and collaborate with other IT professionals.
• Understanding of device management principles and best practices.
• Knowledge of security concepts and best practices related to endpoint security.
• Strong analytical and problem-solving skills to identify and resolve technical issues.
• Ability to prioritize tasks and meet deadlines.
• Willingness to learn and adapt to new technologies and evolving security landscapes.

Operational Equipment

• N/A