Position Summary
The M365 / Intune Administrator is responsible for the administration, support, implementation, and continuous improvement of Microsoft Intune and endpoint management services within a co-managed Microsoft Intune and Microsoft Configuration Manager (MECM/SCCM) environment. This role supports the management of Windows, iOS, and Android devices while leveraging Microsoft's modern management capabilities to improve security, compliance, user experience, and operational efficiency.
The administrator will work closely with Infrastructure, Security, System Support, and Engineering teams to deploy, manage, and support endpoint management solutions including Microsoft Intune, Windows Autopilot, Mobile Device Management (MDM), Mobile Application Management (MAM), application deployment, device compliance, and endpoint security technologies.
The ideal candidate combines strong operational administration skills with the ability to design and implement new endpoint management solutions that support business and technology objectives.
Microsoft Intune Administration
- Administer and maintain Microsoft Intune for enterprise endpoint management.
- Configure and support device enrollment processes for Windows, iOS, and Android devices.
- Create, deploy, and manage Intune configuration profiles, compliance policies, endpoint security policies, and administrative templates.
- Monitor and troubleshoot device enrollment, policy deployment, compliance, and endpoint management issues.
- Maintain Role-Based Access Control (RBAC) within Intune.
Co-Management and Endpoint Management
- Support and administer a co-managed environment utilizing Microsoft Intune and MECM/SCCM.
- Assist in evaluating and transitioning workloads between MECM/SCCM and Intune.
- Monitor endpoint health and compliance across managed devices.
- Troubleshoot client management, policy processing, software deployment, and inventory-related issues.
- Participate in endpoint modernization initiatives.
Windows Autopilot
- Configure and support Windows Autopilot deployment profiles.
- Assist in the design and implementation of modern device provisioning solutions.
- Support Enrollment Status Pages (ESP), deployment profiles, and device enrollment strategies.
- Collaborate with hardware vendors and internal teams to streamline device onboarding processes.
Mobile Device Management (MDM) and Mobile Application Management (MAM)
- Administer enterprise mobile device management solutions for iOS and Android devices.
- Manage enrollment programs, compliance policies, application protection policies, and device restrictions.
- Support corporate-owned and personally owned mobile device enrollment scenarios.
- Configure and maintain mobile application management policies to protect corporate data.
Application Management
- Package, deploy, and manage applications within Microsoft Intune.
- Create and maintain Win32 application packages.
- Manage application assignments, deployment rings, and installation troubleshooting.
- Support Company Portal and application lifecycle management activities.
Solution Design and Implementation
- Design, test, and implement new endpoint management solutions and technology improvements.
- Evaluate new Microsoft technologies and recommend enhancements to existing services.
- Participate in planning and execution of endpoint management projects.
- Develop operational standards, procedures, and technical documentation.
Security and Compliance
- Support Endpoint Security Initiatives utilizing Microsoft Technology.
- Assist with BitLocker management, device compliance enforcement, and security baselines.
- Support Conditional Access and device trust requirements.
- Collaborate with Cybersecurity teams on security remediation efforts and compliance requirements.
- Participate in vulnerability remediation and endpoint hardening activities.
Automation and Reporting
- Utilize PowerShell and automation tools to streamline administrative tasks.
- Create and maintain operational reports and dashboards.
- Analyze endpoint management data to improve service reliability and user experience.
- Document technical procedures, standards, and solutions.
Required Qualifications
- Associate or bachelor’s degree in information technology, Computer Science, or related field, or equivalent experience.
- Minimum of 3 years of enterprise endpoint management experience.
- Minimum of 2 years of Microsoft Intune administration experience.
- Experience supporting Microsoft Endpoint Configuration Manager (MECM/SCCM).
- Experience managing Windows 11 devices.
- Experience administering iOS and Android devices within an enterprise environment.
- Experience deploying and troubleshooting applications.
- Strong knowledge of Microsoft 365 and Microsoft Entra ID.
- Experience working with Windows Autopilot.
- Experience with PowerShell scripting and automation.
- Strong troubleshooting, communication, and documentation skills.
Preferred Qualifications
- Microsoft Certified: Endpoint Administrator Associate.
- Experience supporting cloud-based endpoint management solutions.
- Experience with Conditional Access and Zero Trust security concepts.
- Experience implementing Mobile Application Management (MAM) solutions.
- Experience with Microsoft Defender technologies.
- Experience with large-scale enterprise environments.
- Familiarity with Microsoft Graph and automation APIs.
- Experience participating in endpoint modernization projects.
Technical Skills
- Microsoft Endpoint Manager