Intune Endpoint Solutions Manager

Key Responsibilities

Intune Architecture & Design:

• Lead the architectural design, perform comprehensive review and ongoing optimization of the Microsoft Intune environment, to align with corporate security frameworks, operational best practices, and business requirements.
• Design, document, and implement robust Intune solutions for Windows Autopilot provisioning, Azure AD Join, Hybrid Azure AD Join scenarios, and effective co-management strategies with SCCM.
• Develop and maintain detailed documentation for Intune architecture, configuration standards, operational procedures, and disaster recovery plans.

Policy Management:

• Design, define, rigorously test, and deploy Intune configuration profiles, device compliance policies, and Conditional Access policies tailored for corporate Windows devices, ensuring alignment with security baselines.
• Develop, implement, and manage Mobile Application Management (MAM) and Mobile Device Management (MDM) policies across various device platforms as required by the organization.
• Ensure all Intune policies are aligned with established security baselines, regulatory requirements, and industry best practices for endpoint protection. SCCM & Active Directory Interoperability:
• Architect and maintain seamless interoperability and co-management functionalities between Microsoft Intune, System Center Configuration Manager (SCCM), and on premises Active Directory services [User Query].
• Manage, troubleshoot, and optimize configurations for hybrid Azure AD joined devices, ensuring consistent policy enforcement and user experience.
• Effectively leverage and translate Group Policy Objects (GPOs) from Active Directory to Intune configuration profiles where appropriate, maintaining policy parity during migration or co-existence scenarios. Classified as Internal Endpoint Operations & Management: o Oversee and manage the deployment, regular updates, and security patching of Windows operating systems (Windows 10/11) and the Microsoft 365 Applications suite using Intune and Windows Update for Business.
• Manage the full lifecycle of application deployment, including packaging (MSI, EXE, Win32), testing, and distribution of software to endpoints via Intune.
• Continuously monitor device health, compliance status, and deployment success rates using Intune reporting and analytics, providing regular status updates and proactively addressing identified issues or vulnerabilities.
• Provide Tier 3 expert-level support and advanced troubleshooting for complex Intunerelated issues and broader endpoint management challenges.

Security & Compliance:

• Collaborate closely with internal security and compliance teams to implement, enforce, and audit endpoint hardening measures and security standards through Intune policies and configurations.
• Configure and manage the integration of Intune with Microsoft Defender for Endpoint and other relevant Microsoft 365 security services to enhance threat detection and response capabilities

• Bachelor's degree in an IT-related field or equivalent experience.
• Minimum of 5-7 years of hands-on experience of progressive experience in IT, with at least 5 years of focused, hands-on experience in architecting, deploying, configuring, and managing Microsoft Intune and related endpoint management solutions in large-scale corporate environments.
• Demonstrable, in-depth experience in managing complex hybrid environments involving SCCM and on-premises Active Directory co-existing and interoperating with Intune and Azure Active Directory.
• Quick learner with the ability to adapt to new technologies.
• Proficient in configuring and administering desktops and servers.
• Strong documentation skills.
• Excellent team player with effective interpersonal and communication skills

Seatrium Limited