Intune​/Endpoint Engineer

Our client, a leading financial services firm, is seeking an experienced Intune / Endpoint Engineer to join their Infrastructure and End User Computing team. This individual will be responsible for designing, implementing, and supporting Microsoft Intune and endpoint management solutions across a highly secure enterprise environment. The ideal candidate has extensive experience managing Windows devices, Microsoft 365, Azure AD, and endpoint security while ensuring compliance with financial industry standards.

This role will partner closely with Infrastructure, Security, Identity Management, and Desktop Support teams to modernize endpoint management, improve the end‑user experience, and strengthen the firm's security posture.

• Design, implement, and administer Microsoft Intune for enterprise endpoint management.
• Configure and deploy compliance policies, configuration profiles, and Conditional Access policies.
• Deploy and manage applications through Intune, including Win
  32 applications, Microsoft Store apps, and Microsoft 365 Apps.
• Build and maintain Autopilot deployment profiles and zero‑touch device provisioning.
• Manage device enrollment, lifecycle management, software deployment, and patch management.
• Integrate and support Azure AD, Entra , Microsoft Defender, and Microsoft 365 security solutions.
• Troubleshoot endpoint management, enrollment, authentication, and compliance issues.
• Collaborate with Cybersecurity teams to implement endpoint protection, encryption, and security baselines.
• Maintain endpoint compliance with financial industry security standards and internal governance policies.
• Develop Power Shell scripts to automate endpoint administration and operational tasks.
• Support certificate deployment, Bit Locker management, Windows Update for Business, and Defender for Endpoint.
• Create technical documentation, operational procedures, and knowledge base articles.
• Participate in infrastructure projects, migrations, upgrades, and technology rollouts.

• 5+ years of experience supporting Microsoft Endpoint Manager (Intune) in an enterprise environment.
• Strong experience with Microsoft Intune, Microsoft Endpoint Manager, and Windows endpoint management.
• Hands‑on experience with Azure Active Directory (Entra ) and Microsoft 365 administration.
• Experience with Windows Autopilot deployment and device provisioning.
• Knowledge of Conditional Access, compliance policies, configuration profiles, and endpoint security.
• Experience managing Microsoft Defender for Endpoint and Bit Locker.
• Strong Power Shell scripting skills for automation and administration.
• Experience deploying software packages and managing Windows updates through Intune.
• Understanding of Active Directory, Group Policy, DNS, DHCP, and networking fundamentals.
• Strong troubleshooting and problem‑solving skills.
• Excellent communication skills with the ability to support both technical teams and business users.

• Experience working within a financial services, banking, investment management, or highly regulated environment.
• Knowledge of Microsoft Defender XDR, Defender for Cloud Apps, and Microsoft Purview.
• Experience with JAMF or macOS device management is a plus.
• Familiarity with SCCM/MECM co‑management.
• Microsoft certifications such as:
• Microsoft 365 Administrator Expert (MS‑102)