L3 Endpoint Intune Engineer

Key Responsibilities

Endpoint Engineering and Operations

• Design, operate, and continuously improve Microsoft Intune
• Manage device enrollment, configuration profiles, compliance policies, application protection policies, policy assignments, and operating system updates
• Manage Microsoft Entra joined, Microsoft Entra hybrid joined, and registered devices
• Configure administrative roles, scope tags, device groups, and assignment filters
• Integrate endpoints with Microsoft Entra ID, Microsoft 365, Microsoft Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi
• Monitor platform health, compliance, deployments, updates, and configuration status
• Resolve platform, policy, enrollment, and deployment issues
• Assess platform changes and implement relevant capabilities

Windows and Apple Endpoint Management

• Implement and maintain approved configurations mainly for Windows 11, macOS and iOS is nice to have;
• Design and operate Windows Autopilot and Apple Automated Device Enrollment
• Manage Apple Business Manager integration, enrollment profiles, certificates, tokens, and application licensing
• Configure platform-specific security, authentication, networking, certificates, applications, restrictions, and user-experience settings
• Manage operating system, firmware, driver, and feature updates, including deployment rings and rollback

Application Management and Automation

• Define application deployment standards and package or coordinate applications requiring endpoint expertise
• Configure application requirements, dependencies, detection rules, assignments, installation, and removal
• Resolve deployment failures, compatibility issues, and application conflicts
• Coordinate application testing, rollout, supportability, lifecycle, and retirement with application owners or service providers
• Develop PowerShell and Microsoft Graph automation for deployment, configuration, remediation, reporting, and diagnostics
• Implement Microsoft Intune Remediations, health checks, and reusable diagnostic tools
• Apply testing, version control, documentation, logging, and secure credential handling
• Ensure production automation is monitored, maintainable, and supportable

Endpoint Security and Access (nice to have)

• Implement and maintain endpoint security baselines and device compliance controls
• Configure encryption, endpoint protection, firewall, attack surface reduction, application protection, and privilege management
• Implement Microsoft Defender for Endpoint and Microsoft Entra Conditional Access integration
• Apply least-privilege principles to endpoint administration and local administrator access

Endpoint Support and Service Desk Enablement

• Resolve complex endpoint incidents, perform root cause analysis, and implement permanent fixes or automation.
• Coordinate issue resolution across Service Desk, IT teams, application owners, and external providers.
• Enable Service Desk and local IT through procedures, knowledge articles, training, and technical guidance.
• Review escalations, close operational gaps, and ensure endpoint services remain supportable and business-critical issues are effectively managed.

Device Standards and Architecture

• Translate approved standards into Microsoft Intune configurations
• Maintain the endpoint architecture and key technical documentation
• Evaluate technical deviations and provide recommendations
• Align device standards and configuration baselines with relevant global and local stakeholders

Required Skills and Experience

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management
• Strong Windows 11 engineering, administration, and troubleshooting skills
• Experience managing macOS, iOS, and iPadOS with Microsoft Intune and Apple Business Manager will be considered an advantage
• Experience with Windows Autopilot, device provisioning, application deployment, configuration management, and update management will be considered an advantage
• Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Microsoft Entra Conditional Access
• Experience with Microsoft Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management
• Practical experience with enterprise application packaging and controlled deployment processes
• Strong PowerShell scripting skills and practical experience with Microsoft Graph
• Strong troubleshooting and root-cause analysis skills for complex endpoint issues
• Experience defining device standards, configuration baselines, testing, rollout, and rollback processes will be considered an advantage
• Ability to enable the Service Desk and local IT through technical procedures, training, diagnostics, and support tools
• Good understanding of ITIL-aligned incident, problem, change, configuration, and knowledge-management processes
• Ability to deliver technical solutions independently from design through implementation and operational support
• Strong communication skills and the ability to influence technical decisions in an international organization
• Professional written and spoken English

Additional Qualifications and Competencies

• Relevant Microsoft or Apple certifications are desirable
• Experience with PKI, certificate-based authentication, Microsoft Cloud PKI, SCEP, NDES, VPN, or Wi-Fi is desirable
• Experience with Git, Azure Automation, Power Automate, Windows Autopatch, Endpoint Analytics, Remote Help, or comparable technologies is desirable
• Experience with endpoint asset management, hardware lifecycle, managed service providers, or multinational and regulated environments is desirable
• Self-driven, structured, and accountable, with strong analytical and problem-solving skills
• Hands-on and focused on secure, stable, standardized, and supportable solutions
• Strong communicator who can explain technical topics clearly, build consensus, and influence decisions without formal authority
• Calm and systematic during major incidents and complex troubleshooting
• Collaborative, pragmatic, and committed to knowledge sharing and continuous technical development