Intune Engineer

Intune Engineer

K  is a global provider of differentiated, professional services and technologies delivered across a wide government, defense and industrial base. K  employs approximately 37,000 people worldwide with customers in more than 80 countries and operations in over 29 countries.

K  is looking for a Microsoft Intune Administrator. This is an opportunity to work in a specialist technical role supporting secure, enterprise‑scale endpoint environments across the United Kingdom.

You will be responsible for administering and improving the organisation’s Microsoft Intune platform, Microsoft Configuration Manager (SCCM/MECM) environment, packaging and deploying software, maintaining endpoint configuration and compliance standards, and supporting patch deployment across the Windows, macOS and Linux estate.

The role requires strong hands‑on experience with Microsoft Intune, Microsoft Configuration Manager (SCCM/MECM), Active Directory, Microsoft Azure and Microsoft Entra  will work closely with infrastructure, cybersecurity, application and service management teams to troubleshoot endpoint, identity, application deployment and connectivity issues across cloud and on‑premises environments.

This is a permanent full‑time opportunity based from our Leatherhead offices.

The successful candidate must be a UK citizen and must hold, or be able to successfully complete, Baseline Personnel Security Standard screening.

• Administer, maintain and optimise the organisation’s Microsoft Intune and Microsoft Configuration Manager (SCCM/MECM) environments.
• Configure and manage device enrolment, configuration profiles, compliance policies, security baselines, application policies and endpoint management standards.
• Package, test and deploy software for delivery through Microsoft Intune, Microsoft Configuration Manager and other approved enterprise software distribution platforms.
• Create and maintain application packages, including installation commands, detection methods, dependencies, requirements, supersedence rules and uninstall processes.
• Troubleshoot failed software installations, application conflicts, device enrolment issues and endpoint configuration problems.
• Administer and maintain Microsoft Configuration Manager application deployment infrastructure, software distribution processes and operating system deployment capabilities.
• Manage Windows Server Update Services (WSUS) and Microsoft Configuration Manager software update deployments for Windows desktops and Windows Server environments.
• Manage Windows update rings, feature updates, quality updates, driver updates and other endpoint patching policies through Windows Update for Business and Microsoft Configuration Manager.
• Coordinate, test and deploy operating system and application patches across the Windows, macOS and Linux estate using approved endpoint and patch management platforms.
• Monitor patch compliance, investigate deployment failures and support the remediation of vulnerable or non‑compliant devices.
• Support Microsoft Windows Autopilot device provisioning, enrolment and deployment processes.
• Administer integrations between Microsoft Intune, Microsoft Entra , Active Directory, Microsoft Azure, Microsoft Configuration Manager and related endpoint services.
• Support identity and device management capabilities, including device registration, group membership, role based access, Conditional Access dependencies and authentication services.
• Administer and support Apple Business Manager, Automated Device Enrolment and related Apple device lifecycle management capabilities.
• Configure and manage endpoint policies, application deployments and compliance settings across Windows, macOS, iOS and Android platforms.
• Plan, coordinate and implement operating system upgrades and enterprise software update initiatives across supported endpoint platforms.
• Troubleshoot issues involving Microsoft Intune, Microsoft Configuration Manager, Active Directory, Microsoft Entra , Windows Server, Microsoft Azure and enterprise applications.
• Investigate endpoint connectivity issues involving Domain Name System, Dynamic Host Configuration Protocol, routing, firewalls, proxies,…