Senior Desktop Engineer - Hybrid - Blue Bell, Pennsylvania

Slipstream IT Support Role

At Slipstream we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach. Our solutions are designed exclusively for emerging pharma and biotech organizations.

Slipstream's industry-leading solutions free clients from the demands of internal IT and allow them to rapidly advance their mission. Led by a leadership team that has been together for over 10 years, you will join a proven team, culture, and strategy to drive innovation within the IT outsourcing industry while developing your skillset with the opportunities for internal growth.

• Design, configure, and continuously refine the Microsoft Intune environment to meet organizational security, compliance, and productivity requirements.
• Own Intune tenant settings, conditional access policies, and compliance baselines across Windows, macOS, iOS, and Android endpoints.
• Review and optimize existing configurations on an ongoing basis, identifying gaps, redundancies, and drift from defined standards.
• Maintain and document configuration profiles, endpoint security policies, and compliance posture in alignment with CIS benchmarks or internal security frameworks.
• Deploy and manage applications across the estate via Intune, including Win
  32, MSIX, Line-of-Business, and Microsoft Store app types.
• Define and enforce app protection policies (APP/MAM) for both managed and unmanaged devices, ensuring data loss prevention controls are consistently applied.
• Configure and manage app configuration policies for managed apps, including Microsoft 365 and third-party applications.
• Own the end-to-end application patching process - packaging, testing, staged rollout, and validation - ensuring timely remediation of vulnerabilities.
• Monitor deployment success rates and proactively resolve failed assignments or conflicting policies.
• Design and maintain Azure AD dynamic groups to support accurate, automated policy and application targeting across users and devices.
• Develop and refine dynamic membership rules using device and user attributes (OS version, department, location, compliance state) to reduce manual overhead.
• Audit group membership and assignment logic regularly, eliminating over-broad targeting or conflicting inclusions and exclusions.
• Collaborate with IAM and security teams to align group structures with role-based access control (RBAC) and zero-trust principles.
• Write, test, and deploy Power Shell scripts via Intune for device configuration, remediation, and reporting tasks that fall outside native policy capabilities.
• Build and maintain Proactive Remediations to detect and self-heal common endpoint issues at scale.
• Leverage Microsoft Graph API and Power Shell modules (Microsoft.Graph, Az) to automate administrative tasks, reporting, and bulk operations within the Intune and Entra t.
• Maintain a version-controlled script library (Git), ensuring scripts are documented, peer-reviewed, and tested in a non-production environment before deployment.
• Evaluate and implement automation opportunities to reduce manual toil across endpoint lifecycle processes - provisioning, patching, decommission.
• Maintain endpoint compliance policies and act as the subject-matter expert for Intune-based security controls within the wider security team.
• Integrate Intune with Microsoft Defender for Endpoint, ensuring MDE onboarding, sensor health, and policy enforcement are maintained across all managed devices.
• Support audit and compliance activities by producing accurate device compliance reports and responding to findings in a timely manner.
• Act as the escalation point for complex Intune, endpoint, and application delivery issues, driving root-cause analysis and resolution.
• Mentor junior engineers, conducting script and configuration reviews and sharing knowledge of modern management best practices.
• Contribute to and maintain internal runbooks, SOPs, and technical documentation for all areas of the Intune environment.
• Stay current with Microsoft Intune, Entra , and Windows feature releases, proactively assessing impact and communicating changes to the team.
• Lead or contribute to endpoint…