Subcontractor

Area(s) of responsibility

We are seeking an experienced Intune Architect with 14+ years of IT Infrastructure and End User Computing (EUC) experience, including extensive expertise in Microsoft Intune, SCCM (Microsoft Endpoint Configuration Manager), Co-management, Autopilot, Endpoint Security, and Modern Workplace transformation. The ideal candidate will lead architecture, design, migration, implementation, and operational excellence initiatives for enterprise endpoint management environments across hybrid and cloud-native platforms.

Architecture & Strategy

• Define and drive endpoint management strategy using Microsoft Intune and SCCM.
• Design scalable endpoint management architectures for large enterprise environments.
• Lead SCCM to Intune modernization and cloud transformation initiatives.
• Develop roadmap for endpoint lifecycle management, compliance, and security.

Intune & Modern Management

• Architect and implement Microsoft Intune solutions for Windows, macOS, iOS, and Android devices.
• Design and manage:
• Compliance Policies
• Configuration Profiles
• Conditional Access
• Endpoint Security Policies
• Device Enrollment Programs
• Windows Update for Business
• Implement and manage Windows Autopilot deployments.

SCCM / MECM

• Architect and support SCCM infrastructure including:
• Software Distribution
• Patch Management
• OS Deployment (OSD)
• Task Sequences
• Application Packaging
• Reporting
• Design Cloud Management Gateway (CMG) and Tenant Attach solutions.
• Lead co-management workload transition from SCCM to Intune.

Security & Compliance

• Integrate Intune with:
• Microsoft Defender for Endpoint
• Microsoft Entra ID (Azure AD)
• Conditional Access
• BitLocker
• Endpoint Privilege Management
• Ensure compliance with enterprise security and governance standards.

Automation & Optimization

• Develop automation solutions using:
• PowerShell
• Microsoft Graph API
• Azure Automation
• Optimize endpoint deployment, patching, and compliance reporting.

Mandatory Technical Skills

Endpoint Management

• Microsoft Intune
• SCCM / MECM
• Co-Management
• Windows Autopilot
• Windows Update for Business (WUfB)
• Mobile Device Management (MDM)
• Mobile Application Management (MAM)

Identity & Cloud

• Microsoft Entra ID (Azure AD)
• Azure Subscription Management
• Hybrid Identity
• Conditional Access

Endpoint Security

• Microsoft Defender for Endpoint
• BitLocker
• Endpoint Security Baselines
• Compliance & Governance

Operating Systems

• Windows 10/11
• macOS
• Android
• iOS/iPadOS

Scripting & Automation

• PowerShell
• Graph API
• Azure Automation