Subcontractor

Area(s) of responsibility Role Summary

We are seeking an experienced Intune Architect with 14+ years of IT Infrastructure and End User Computing (EUC) experience, including extensive expertise in Microsoft Intune, SCCM (Microsoft Endpoint Configuration Manager), Co-management, Autopilot, Endpoint Security, and Modern Workplace transformation . The ideal candidate will lead architecture, design, migration, implementation, and operational excellence initiatives for enterprise endpoint management environments across hybrid and cloud-native platforms.

Key Responsibilities

Architecture & Strategy

Define and drive endpoint management strategy using Microsoft Intune and SCCM.

Design scalable endpoint management architectures for large enterprise environments.

Lead SCCM to Intune modernization and cloud transformation initiatives.

Develop roadmap for endpoint lifecycle management, compliance, and security.

Intune & Modern Management

Architect and implement Microsoft Intune solutions for Windows, macOS, iOS, and Android devices.

Design and manage:

Compliance Policies

Configuration Profiles

Conditional Access

Endpoint Security Policies

Device Enrollment Programs

Windows Update for Business

Implement and manage Windows Autopilot deployments.

SCCM / MECM

Architect and support SCCM infrastructure including:

Software Distribution

Patch Management

OS Deployment (OSD)

Task Sequences

Application Packaging

Reporting

Design Cloud Management Gateway (CMG) and Tenant Attach solutions.

Lead co-management workload transition from SCCM to Intune.

Security & Compliance

Integrate Intune with:

Microsoft Defender for Endpoint

Microsoft Entra ID (Azure AD)

Conditional Access

BitLocker

Endpoint Privilege Management

Ensure compliance with enterprise security and governance standards.

Automation & Optimization

Develop automation solutions using:

PowerShell

Microsoft Graph API

Azure Automation

Optimize endpoint deployment, patching, and compliance reporting.

Mandatory Technical Skills

Endpoint Management

Microsoft Intune

SCCM / MECM

Co-Management

Windows Autopilot

Windows Update for Business (WUfB)

Mobile Device Management (MDM)

Mobile Application Management (MAM)

Identity & Cloud

Microsoft Entra ID (Azure AD)

Azure Subscription Management

Hybrid Identity

Conditional Access

Endpoint Security

Microsoft Defender for Endpoint

BitLocker

Endpoint Security Baselines

Compliance & Governance

Operating Systems

Windows 10/11

macOS

Android

iOS/iPadOS

Scripting & Automation

PowerShell

Graph API

Azure Automation