Title: Subcontractor
Area(s) of responsibility
We are seeking an experienced Intune Architect with 14+ years of IT Infrastructure and End User Computing (EUC) experience, including extensive expertise in Microsoft Intune, SCCM (Microsoft Endpoint Configuration Manager), Co-management, Autopilot, Endpoint Security, and Modern Workplace transformation. The ideal candidate will lead architecture, design, migration, implementation, and operational excellence initiatives for enterprise endpoint management environments across hybrid and cloud-native platforms.
Architecture & Strategy
- Define and drive endpoint management strategy using Microsoft Intune and SCCM.
- Design scalable endpoint management architectures for large enterprise environments.
- Lead SCCM to Intune modernization and cloud transformation initiatives.
- Develop roadmap for endpoint lifecycle management, compliance, and security.
Intune & Modern Management
- Architect and implement Microsoft Intune solutions for Windows, macOS, iOS, and Android devices.
- Design and manage:
- Compliance Policies
- Configuration Profiles
- Conditional Access
- Endpoint Security Policies
- Device Enrollment Programs
- Windows Update for Business
- Implement and manage Windows Autopilot deployments.
SCCM / MECM
- Architect and support SCCM infrastructure including:
- Software Distribution
- Patch Management
- OS Deployment (OSD)
- Task Sequences
- Application Packaging
- Reporting
- Design Cloud Management Gateway (CMG) and Tenant Attach solutions.
- Lead co-management workload transition from SCCM to Intune.
Security & Compliance
- Integrate Intune with:
- Microsoft Defender for Endpoint
- Microsoft Entra ID (Azure AD)
- Conditional Access
- BitLocker
- Endpoint Privilege Management
- Ensure compliance with enterprise security and governance standards.
Automation & Optimization
- Develop automation solutions using:
- PowerShell
- Microsoft Graph API
- Azure Automation
- Optimize endpoint deployment, patching, and compliance reporting.
Mandatory Technical Skills
Endpoint Management
- Microsoft Intune
- SCCM / MECM
- Co-Management
- Windows Autopilot
- Windows Update for Business (WUfB)
- Mobile Device Management (MDM)
- Mobile Application Management (MAM)
Identity & Cloud
- Microsoft Entra ID (Azure AD)
- Azure Subscription Management
- Hybrid Identity
- Conditional Access
Endpoint Security
- Microsoft Defender for Endpoint
- BitLocker
- Endpoint Security Baselines
- Compliance & Governance
Operating Systems
- Windows 10/11
- macOS
- Android
- iOS/iPadOS
Scripting & Automation
- PowerShell
- Graph API
- Azure Automation