Endpoint Security Specialist - MS Intune

Job Profile : Endpoint Performance Specialist

Experience : 4+ yrs

Working Days : Monday-Friday

Shift timing : 10.30am to 7.30pm / 2pm to 11pm

The Position :

- Utilize tools such as Windows Performance Analyzer (WPA), Windows Performance Recorder (WPR), Sysinternals Suite, PerfMon, ProcMon, and ETW tracing

- Define and maintain endpoint performance baselines and implement proactive monitoring strategies

- Conduct root cause analysis of recurring endpoint performance issues and recommend long-term solutions

Endpoint Imaging & Deployment Automation :

- Automate OS and application deployments using Intune (Autopilot) and Azure AD

- Develop and maintain PowerShell scripts for image updates, driver integration, and application packaging

- Implement zero-touch provisioning and streamline device onboarding processes

Intune & Security Policy Management :

- Configure and manage Intune endpoint policies, compliance rules, and Autopilot deployments

- Implement and maintain Windows Defender Application Control (WDAC) policies to enforce application security and compliance without compromising performance

- Align endpoint configurations with enterprise security baselines (BitLocker, Microsoft Defender, CIS, and MDM policies)

- Collaborate with Security teams to ensure balance between performance, optimization and compliance

Knowledge and Experience requirements :

- Strong expertise in Windows 11 internals (boot process, registry, kernel processes, OS servicing)

- Hands-on experience with Microsoft Intune (Autopilot, Endpoint Security, Compliance, Analytics)

- Proven experience implementing and managing Windows Defender Application Control (WDAC)

- Proficiency in automation and scripting (PowerShell required; Python a plus)