Senior Microsoft Intune Specialist / Endpoint Management Engineer

About the role

An internal IT team is looking for an experienced Microsoft Intune Specialist to own the design, implementation and day-to-day management of its unified endpoint management (UEM) environment. The role calls for deep, hands-on expertise in core Intune device and app management, plus strong working knowledge of advanced Intune Suite capabilities.

Key responsibilities

• Own the end-to-end lifecycle of the Intune environment: enrollment, configuration, policy management, monitoring and continuous improvement.
• Design and manage device enrollment across Windows (Autopilot), iOS/iPadOS, Android (Enterprise/AE) and macOS.
• Build and maintain compliance policies, configuration profiles and conditional access integration with Entra ID.
• Manage application deployment, packaging and update strategies (Win32 apps, MSIX, LOB apps, store apps).
• Administer Intune Suite features such as Endpoint Privilege Management, Advanced Endpoint Analytics, Remote Help, Enterprise App Management, Cloud PKI and Microsoft Tunnel.
• Handle co-management scenarios and hybrid/cloud-native transitions from Configuration Manager (SCCM/MECM) where applicable.
• Maintain update management policies (Windows Update for Business, feature and quality update rings).
• Troubleshoot device compliance, enrollment failures, policy conflicts and app deployment issues.
• Work with the security team on integrating Intune with Defender for Endpoint for risk-based conditional access.
• Maintain internal documentation (configuration standards, policy matrices, runbooks) and support L1-L2 teams; liaise with Microsoft support and external vendors when needed.

Required profile

• 5+ years of experience in Microsoft endpoint management, with a strong focus on Intune.
• Hands-on experience with device enrollment (Autopilot, Apple Business Manager, Android Enterprise), compliance and configuration policies, and application lifecycle management.
• Experience integrating with Microsoft Defender for Endpoint and familiarity with MDM and MAM concepts.
• Relevant certifications preferred (e.g. MD-102, MS-102).

Required skills

• Intune Suite: Endpoint Privilege Management, Advanced Endpoint Analytics, Remote Help, Enterprise App Management, Cloud PKI, Microsoft Tunnel.
• Windows Autopilot, co-management with Configuration Manager, Windows Update for Business.
• Familiarity with PowerShell and Graph API for automation and reporting.