Intune Architect

Mid-Level: $130,000-$150,000 | Architect: $160,000-$190,000

This role is responsible for designing, implementing, and optimizing Microsoft Intune and related Modern Endpoint Management solutions across customer organizations. This person partners with IT leadership, security teams, and end-user computing teams to drive secure, scalable, and automated device management aligned with Zero Trust principles, leading assessments, architecture, deployment, migration, and operational readiness activities.

Hiring for this function at two levels. Candidates are leveled based on depth of Intune architecture experience, scope of ownership, and enterprise scale.

• • Configures and administers Intune enrollment, compliance, and configuration profiles under architectural direction.
• • Executes Autopilot deployment, app packaging, and Conditional Access build-out.
• • Builds automation scripts (Power Shell/Graph API) for day-to-day operations.
• • Provides Tier 2/3 troubleshooting and hands-on migration execution.
• • Owns end-to-end enterprise Intune architecture and modernization roadmap across Windows, macOS, iOS/iPadOS, and Android.
• • Defines Zero Trust, compliance, and governance frameworks; sets standards the consultant team implements to.
• • Leads complex SCCM/JAMF/Workspace ONE migration strategy and co-management design.
• • Serves as the customer-facing technical authority and final escalation point for design decisions.

• • Develop enterprise-grade Intune architectures covering Windows, macOS, iOS/iPadOS, and Android.
• • Assess current endpoint management maturity and define modernization roadmaps.
• • Design policies aligned with Zero Trust, least privilege, and compliance frameworks.
• • Integrate Intune with the Microsoft 365 security stack (Entra , Defender, Purview, Autopatch, Autopilot).

• • Configure Intune device enrollment, compliance policies, configuration profiles, and application deployment.
• • Lead Autopilot deployment strategy, including hardware hash import, ESP configuration, and white-glove workflows.
• • Implement Conditional Access policies and device compliance integrations.
• • Package and deploy Win
  32, LOB, and Store apps using modern deployment techniques.
• • Configure and optimize Windows Update for Business and Autopatch.

• • Lead migrations from legacy tools (SCCM/Config Mgr, JAMF, Workspace ONE, etc.) to Intune.
• • Develop co-management or tenant-attach strategies where applicable.
• • Build automation using Power Shell, Graph API, and proactive remediation scripts.

• • Implement device compliance, endpoint hardening, and security baselines.
• • Integrate Defender for Endpoint and ensure secure posture across all device platforms.
• • Support audit, reporting, and regulatory compliance requirements.

• • Create operational runbooks, governance models, and best-practice documentation.
• • Train IT teams on Intune administration, troubleshooting, and lifecycle management.
• • Provide Tier 3 escalation support for complex endpoint issues.

• • Intune SME-level expertise required - deep, hands-on, production-scale experience with Microsoft Intune is a must-have, not a nice-to-have.
• • Deep expertise with Microsoft Intune, Entra , Autopilot, Conditional Access, and Defender for Endpoint.
• • Strong understanding of Windows 10/11, macOS, iOS/iPadOS, and Android management.
• • Experience with Power Shell, Graph API, and automation frameworks.
• • Background in…