Endpoint Engineer Microsoft Intune

Job description

The ideal candidate is an experienced endpoint engineer who can independently manage recurring operational activities, troubleshoot deployment issues, and collaborate effectively with Cybersecurity, Service Desk, and application teams.

MUST HAVE Skills6+ years of hands-on Microsoft Intune experience in an enterprise Windows environment8 years of Endpoint/Desktop Engineering or Systems Administration experienceStrong experience with Windows 10/11 patching, deployment rings, compliance, and remediationHands-on Win32 application packaging and deployment using IntuneExperience creating and troubleshooting .intunewin packages, detection rules, requirements, dependencies, supersedence, assignments, and uninstall processesStrong Windows 11 administration and troubleshootingWorking knowledge of Microsoft Entra ID, device identity, groups, and assignmentsPowerShell scripting for deployment, detection, remediation, automation, and troubleshootingExperience with endpoint vulnerability remediation and working with Cybersecurity teamsExperience with change, release, and incident management processesStrong troubleshooting, documentation, communication, and follow-through skillsKey ResponsibilitiesManage monthly Windows security and quality patching through Microsoft Intune.Configure deployment rings, scheduling, monitoring, compliance reporting, and exception handling.Troubleshoot failed, stalled, and non-compliant patch deployments.Package, test, deploy, update, and retire Windows applications through Intune Win32 apps.Troubleshoot application installation and deployment failures.Manage Intune configuration profiles, compliance policies, device groups, assignments, and endpoint health.Support Windows 11 enrollment, provisioning, and Autopilot activities.Identify and remediate endpoint vulnerabilities in partnership with Cybersecurity.Develop and maintain PowerShell scripts for deployment and remediation.Investigate escalated endpoint issues and engage senior engineers when required.Maintain technical documentation, packaging standards, test evidence, and deployment records.Provide status updates on patch compliance, deployments, vulnerabilities, risks, and remediation.Windows Autopilot and modern device provisioningMicrosoft Defender for EndpointVulnerability management tools such as Tenable, Qualys, or Rapid7Windows security baselines and endpoint hardeningApplication packaging tools and packaging automationMicrosoft MD-102 certificationITIL and enterprise change-control experienceEducationBachelor s degree in IT, Computer Science, or related field