About the role
About the RoleWe are looking for an experienced Microsoft Intune Specialist to join our internal IT team, owning the design, implementation, and day-to-day management of our unified endpoint management (UEM) environment. This role requires deep, hands-on expertise in core Intune device/app management along with strong working knowledge of Microsoft Intune Suite advanced capabilities.
Key Responsibilities
- Own the end-to-end lifecycle of our Intune environment — enrollment, configuration, policy management, monitoring, and continuous improvement
- Design and manage device enrollment strategies across Windows (Autopilot), iOS/iPadOS, Android (Enterprise/AE), and macOS
- Build and maintain compliance policies, configuration profiles, and conditional access integration with Entra ID
- Manage application deployment, packaging, and update strategies (Win32 apps, MSIX, LOB apps, store apps) across platforms
- Administer Intune Suite advanced features, including:
- Endpoint Privilege Management (EPM)
- Advanced Endpoint Analytics
- Remote Help
- Enterprise App Management
- Cloud PKI
- Microsoft Tunnel for Mobile Application Management
- Manage co-management scenarios and hybrid/cloud-native transitions from Configuration Manager (SCCM/MECM) where applicable
- Implement and maintain update management policies (Windows Update for Business, feature/quality update rings)
- Troubleshoot device compliance, enrollment failures, policy conflicts, and app deployment issues
- Collaborate with security team on integrating Intune with Defender for Endpoint for risk-based conditional access
- Maintain internal documentation: configuration standards, policy matrices, and operational runbooks
- Provide guidance and support to service desk/L1-L2 teams on endpoint management issues
- Liaise with Microsoft support and external vendors when required for escalations or advisory support
- Stay current with Intune roadmap updates and evaluate new features for adoption
Required Skills & Experience
- 5+ years of experience in Microsoft endpoint management, with a strong focus on Microsoft Intune
- Deep, hands-on expertise in:
- Device enrollment (Autopilot, Apple Business Manager/ABM, Android Enterprise)
- Compliance and configuration policy design across Windows, iOS, Android, macOS
- Application deployment and lifecycle management
- Conditional access integration with Entra ID
- Working knowledge of Microsoft Intune Suite features: Endpoint Privilege Management, Advanced Endpoint Analytics, Remote Help, Enterprise App Management, Cloud PKI, Microsoft Tunnel
- Solid understanding of Windows Autopilot, co-management with Configuration Manager, and Windows Update for Business
- Familiarity with PowerShell/Graph API for Intune automation and reporting
- Understanding of mobile device management (MDM) and mobile application management (MAM) concepts
- Experience integrating with Microsoft Defender for Endpoint
- Relevant certifications preferred (e.g., MD-102, MS-102)