Senior Engineer — Systems

Essential Duties and Responsibilities:

• Design, implement, and maintain enterprise Intune infrastructure, including configuration profiles, compliance policies, conditional access, and application management at scale.
• Architect and manage Windows Autopilot deployment solutions across the organization, including profile design, device registration, and integration with Entra  Intune.
• Plan and execute migrations from on‑premises or hybrid endpoint management environments (MECM/GPO) to a modern Intune‑based management model, minimizing disruption to end users.
• Train, guide, and support cross‑functional teams while streamlining system processes, improving workflow efficiency, and enhancing the overall user experience.
• Maintain a working knowledge of MECM infrastructure to support co‑management scenarios, policy coexistence, and workload transitions to Intune.
• Configure and manage MECM and Intune co‑management workloads to ensure a smooth transition toward cloud‑native endpoint management.
• Define and enforce device configuration standards, security baselines, and compliance frameworks across managed endpoints.
• Provide technical guidance and mentorship to associate‑ and mid‑level engineers on Intune, Autopilot, and endpoint management best practices.
• Partner with security, identity, and helpdesk teams to align endpoint management strategies with broader organizational goals.
• Own and maintain comprehensive documentation for Intune and Autopilot processes, migration playbooks, and infrastructure configurations.

• Intune infrastructure ownership – design, implement, and maintain enterprise Intune infrastructure including configuration profiles, compliance policies, conditional access, and app management at scale.
• Autopilot program lead – architect and manage Windows Autopilot deployment strategies across the organization, including profile design, device registration, and integration with Entra  Intune.
• Intune migration leadership – plan and execute migrations from on‑premises or hybrid management environments (MECM/GPO) to a modern Intune‑based management model, minimizing disruption to end users.
• MECM infrastructure support – maintain working knowledge of MECM infrastructure to support co‑management scenarios, policy coexistence, and workload transitions to Intune.
• Co‑management configuration – configure and manage MECM and Intune co‑management workloads, ensuring a smooth transition path as the organization moves toward cloud‑native management.
• Policy & security architecture – define and enforce device configuration standards, security baselines, and compliance frameworks across managed endpoints.
• Team mentorship – provide technical guidance and mentorship to associate and mid‑level engineers on Intune, Autopilot, and endpoint management best practices.
• Stakeholder collaboration – partner with security, identity, and helpdesk teams to align endpoint management strategies with broader organizational goals.
• Documentation & runbooks – own and maintain comprehensive documentation for all Intune and Autopilot processes, migration playbooks, and infrastructure configurations.

• Bachelor’s degree in a relevant field of study and 5+ years of relevant professional experience required, or an equivalent combination of education and experience.

• 5+ years of experience in enterprise endpoint management or systems engineering.
• 3+ years of hands‑on experience with Microsoft Intune in a production enterprise environment.
• Proven experience leading or executing an Intune migration from MECM or GPO‑based management.
• Strong working knowledge of Windows Autopilot in an enterprise setting.
• Familiarity with MECM/SCCM in a co‑management or hybrid capacity.
• Expert level in Microsoft Intune (tenant configuration and administration, device profiles, compliance policies, app deployment, Power Shell scripting, RBAC, Entra , endpoint security policies, update rings, reporting).
• Expert level in Windows Autopilot (profile design, deployment strategy, hardware hash registration, ESP configuration, Autopilot reset).
• Core competency in Intune migration (MECM to Intune planning,…