Endpoint Intune Administrator
Posted Updated
Summary
Administers Microsoft Intune end-to-end as an endpoint administrator: builds compliance policies and configuration profiles, runs Autopilot zero-touch deployments, packages and deploys Win32/M365/LOB apps, enforces Conditional Access, and patches Windows devices, plus L2/L3 support and PowerShell automation. Core stack: Intune, Entra ID, Defender for Endpoint.
- Manage Microsoft Intune end-to-end for Windows, macOS, iOS, and Android devices.
- Design, implement, and maintain Intune configuration profiles, compliance policies, device restrictions, and security baselines.
- Administer and support Mobile Device Management (MDM) and Mobile Application Management (MAM) solutions.
- Manage the complete device lifecycle, including enrollment, provisioning, configuration, monitoring, troubleshooting, and decommissioning.
- Implement, maintain, and optimize Windows Autopilot and Zero-Touch Deployment processes.
- Deploy, manage, and troubleshoot Win32 applications, Microsoft 365 Apps, and Line-of-Business (LOB) applications.
- Package, deploy, maintain, and troubleshoot enterprise applications using Microsoft Intune, including Win32 apps, Microsoft 365 Apps, and Line-of-Business (LOB) applications.
- Create and manage application packages, deployment policies, detection methods, requirement rules, dependencies, supersedence, and application lifecycle management.
- Coordinate application testing, rollout, upgrade, and retirement activities while ensuring compliance with organizational security and operational standards.
- Implement and administer Conditional Access policies to enforce device compliance and secure access to corporate resources.
- Monitor endpoint security posture, compliance status, and proactively remediate non-compliant devices.
- Implement endpoint security standards, hardening guidelines, and Zero Trust principles.
- Manage Windows Update for Business (WUfB), Feature Updates, Quality Updates, and update deployment strategies.
- Ensure endpoint patch compliance and security update deployment across the organization.
- Provide Level 2 and Level 3 support for endpoint-related incidents and service requests.
- Troubleshoot device enrollment, policy deployment, application deployment, compliance, and Autopilot provisioning issues.
- Conduct root cause analysis and implement corrective and preventive actions for recurring endpoint issues.
- Develop and maintain PowerShell scripts to automate endpoint administration, reporting, and operational processes.
- Generate and maintain compliance, asset inventory, security, and deployment reports.
- Create and maintain technical documentation, Standard Operating Procedures (SOPs), and knowledge base articles.
- Collaborate with Infrastructure, Security, Service Desk, and business stakeholders to improve endpoint management services and user experience.
- Evaluate and recommend improvements to endpoint management, automation, compliance, and security processes.
- Bachelor's Degree in Information Technology, Computer Science, Information Systems, or related field.
- Minimum 1 years of experience in Endpoint Administration, Intune Administration, Desktop Engineering, System Administration, or Modern Workplace environments.
- Proven hands-on experience administering Microsoft Intune in an enterprise environment.
- Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, and Identity Management.
- Experience with Windows Autopilot and device enrollment methodologies.
- Experience managing Windows 10/11, macOS, iOS, and Android devices.
- Strong understanding of endpoint security, device compliance, and security baselines.
- Experience with Microsoft Defender for Endpoint is preferred.
- Proficiency in PowerShell scripting and process automation is preferred.
- Strong troubleshooting, analytical, and problem-solving skills.
- Excellent communication skills with the ability to explain technical concepts to non-technical users.
- Ability to work independently, manage priorities, and take ownership of endpoint management platforms.
- Microsoft Certified: Endpoint Administrator Associate (MD-102)