EndPoint Engineer

Job description

The engineer is the technical escalation point for L1L2 teams resolves complex endpoint issues to root cause and turns recurring issues into standard solutions SOPs and automation

Key Responsibilities

Microsoft Intune Endpoint Management

Design configure and maintain Intune tenant settings enrollment restrictions device categories filters scope tags and RBACOwn Windows Autopilot user driven self deploying pre provisioning including hardware hash import deployment profiles and Enrollment Status Page ESP tuningBuild and manage configuration profiles Settings Catalog policies compliance policies and Conditional Access integration with Entra IDManage Windows Update for Business rings feature updates driver firmware updates and Windows Autopatch where applicableDeploy and govern endpoint security policies Defender for Endpoint onboarding BitLocker File Vault encryption firewall ASR rules and LAPSRun comanagement migration from SCCM ConfigMgr to Intune including workload shifts and ongoing hybrid joined device supportManage Android Enterprise and iOS iPadOS policies app protection MAM and BYOD scenariosTroubleshoot enrollment policy sync and app deployment failures using Intune logs Event Viewer MDM diagnostics and Graph APICreate reports dashboards and remediation scripts Proactive Remediations Remediations to improve compliance and reduce ticket volume

Apple Business Manager ABM and Apple Device Management

Administer ABM Apple IDrole management MDM server token lifecycle device assignment and federation with Entra IDConfigure Automated Device Enrollment ADE with Intune for zerotouch macOS iOS and iPadOS provisioning including enrollment profiles supervision Setup Assistant settings and Await Final ConfigurationManage Apps and Books VPP licensing app assignment device vs user and license reclamationMaintain Managed Apple IDs Apple tokencertificate renewals APNs ABM VPP and resellerserialnumber onboardingDeploy macOS configuration FileVault Gatekeeper Platform SSO Enterprise SSO software update enforcement and DDM Declarative Device Management where supportedResolve Applespecific escalations such as ADE enrollment failures token expiry activation lock supervision and lostmode scenarios

Application Packaging and Deployment

Package test and publish applications for Windows Win32 intunewin MSI MSIX scripts and macOS PKG DMG managed LOB appsUse industry packaging tools and methods Win32 Content Prep Tool PSAppDeployToolkit Master Packager InstallShield Advanced Installer Apple Composer pkgbuild and Winget Microsoft Store appsDefine detection rules requirements dependencies supersedence uninstall logic and return codes for every appRun packaging lifecycle intake vendor media validation build UAT in pilot rings production release version upgrade and retirementMaintain a packaging standard naming convention source repository and version control keep packaging documentation currentAssess application compatibility for Windows 11 and Apple Silicon Rosetta native and remediate where neededDevelop PowerShell and shellbash scripts to automate installs configuration and remediation

Operations Escalation and Governance

Act as L3 escalation point for L2service desk and deskside teams own P1P2 incidents through to RCA and permanent fixContribute to problem management change management CAB and release planning for monthly patching and application releasesCreate and maintain SOPs runbooks knowledge articles and architecturedesign documentsIdentify ticket patterns and drive deflection through selfservice Company Portal automation and SOPbased resolutionSupport audit and security requirements compliance reporting encryption status patch posture

L3 vs L4 Expectations

DimensionL3 Senior EngineerL4 Lead SME

ScopeExecutes and supports defined Intune ABM and packaging workstreamsOwns endtoend design and standards across all three domainsEscalationsResolves complex L2 escalations independentlyHandles P1major incidents vendor escalations Microsoft Apple and RCA ownershipDesignImplements to approved design recommends improvementsAuthors HLDLLD tenant architecture and policy baselinesPackagingBuilds and tests complex packages handles upgrades Defines packaging framework quality gates and automation pipelineProjectsContributes to migrations and rolloutsLeads migrations

Skills

Mandatory Skills : Azure AKS, Azure API Management, Azure BLOB, Azure Database Service, Azure Infra Services, Azure Monitor

Apply today or share profiles at priya@smartitframe.com