Modern Device Management - Dev Lead

Job Details

Work mode:
Fully onsite Contract duration: 1 year

Location:

London

Role

Title:

Modern Device Management - Dev Lead
Minimum years of experience: 10-15 years

Deep technical expertise in Microsoft Intune and strong fundamentals in modern endpoint management, identity, and endpoint security. The ideal candidate will possess Level 200 knowledge across all aspects of Intune and demonstrate the ability to design, implement, troubleshoot, and optimize enterprise‑grade endpoint management solutions. Strong experience in managing Windows, Mac and AVD devices from Intune, must have solid experience in modern device management transitioning and project implementations.

• Serve as a subject matter expert (SME) for Microsoft Intune administration, policy configuration, and troubleshooting.
• Manage and optimize device lifecycle management, including enrollment, compliance, application deployment, updates, and patching.
• Administer and troubleshoot mobile device management (MDM) and mobile application management (MAM) policies.
• Support Windows Autopilot deployments and zero‑touch provisioning processes.
• Configure and manage Conditional Access, compliance policies, and integration with Microsoft Entra  (Azure
  
  AD).
• Ensure endpoint security baselines, hardening policies, and threat protection measures are effectively implemented.
• Provide advanced troubleshooting and root cause analysis for escalated Intune and endpoint management issues.
• Collaborate with security, identity, and infrastructure teams to ensure a holistic approach to endpoint and identity protection.
• Maintain documentation, runbooks, and knowledge articles to standardize operations and support knowledge transfer.
• Mentor and guide Level1 and Level2 support teams in Intune operations and best practices.

Proven experience as an Intune Administrator (Level3 or equivalent senior role) in a mid-to-large enterprise environment.

Strong technical knowledge of:

• Device enrollment methods (Autopilot, BYOD, corporate‑owned, hybrid).
• Compliance and configuration profiles (Windows, iOS, Android, macOS).
• App lifecycle management (LOB apps, MSStore apps, Win
  32 app deployment).
• Update management, patch compliance, and reporting.

Solid understanding of Microsoft Entra  (Azure

AD), including Conditional Access, Hybrid Join, and device identities.

Familiarity with endpoint security (Defender for Endpoint, Bit Locker, security baselines, policy hardening).

Knowledge of Power Shell scripting and automation for Intune/endpoint management tasks.

Strong troubleshooting and problem‑solving skills with the ability to manage escalations independently.

Excellent documentation, communication, and cross‑team collaboration skills.

• Microsoft certifications such as MS‑101, SC‑900, MD‑102.
• Experience with Microsoft Defender for Endpoint, vulnerability management, and security compliance reporting.
• Familiarity with Power BI or KQL for custom reporting and dashboards.
• Understanding of Zero Trust architecture and modern security practices.