Description :

Role : Infrastructure Ops Engineer (Intune/SCCM and Windows)

Location : Bengaluru, Karnataka 560103, India (Hybrid onsite 2 days)

Duration : 6 months CTH (Contract-to-Hire)

Job Description :

Endpoint Management Architecture and Operations :

- Lead the administration, maintenance, and operational support of the enterprise-level Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune infrastructure.

- Provide Level 3 (L3) support and in-depth troubleshooting for complex incidents related to endpoint configurations, software deployment failures, patch management issues, and client health across a large-scale global environment.

- Implement and manage Co-management strategies between SCCM and Intune, leveraging the benefits of both on-premises and modern cloud management functionalities.

- Configure, deploy, and manage endpoint security policies, compliance baselines, and conditional access policies using Intune and Microsoft Entra ID (Azure AD).

- Monitor the health, performance, and capacity of the SCCM site servers, distribution points, and the Intune service, performing necessary optimization and remediation.

Operating System and Application Deployment :

- Design, build, and maintain the Standard Operating Environment (SOE) and Gold Images for Windows 10/11 using Operating System Deployment (OSD) via SCCM Task Sequences and Windows Autopilot via Intune.

- Manage the full lifecycle of application deployment, including packaging, testing, quality assurance, and distribution using SCCM and Intune to various device groups and user collections.

- Develop and maintain automated software packaging, updates, and configuration scripts using PowerShell and other relevant scripting languages (VBScript, Batch) to streamline and industrialize deployment processes.

- Manage the deployment of Microsoft 365 applications and services, ensuring proper integration and configuration with the modern workplace environment.

Patch Management and Security Compliance :

- Own the end-to-end patch management process for Microsoft operating systems (OS) and third-party applications using SCCM (WSUS) and Intune, ensuring timely deployment and high compliance rates across the endpoint fleet.

- Collaborate with the Security teams to promptly address critical vulnerabilities by implementing emergency patching and configuration changes on endpoints.

- Develop and automate compliance reporting dashboards using SCCM and Intune reporting tools to provide visibility into endpoint health, security posture, and patching status.

- Implement and manage disk encryption solutions such as BitLocker via Intune/SCCM policies, including key recovery and local administrative password solutions (LAPS).

Automation, Documentation, and Process Improvement :

- Drive automation initiatives to reduce manual efforts in endpoint management, troubleshooting, and daily operational tasks.

- Create and maintain detailed technical documentation, Standard Operating Procedures (SOPs), and knowledge base articles for L1/L2 support teams and new processes.

- Lead change management activities, ensuring all infrastructure changes are thoroughly tested, documented, and approved following ITIL standards before deployment to the production environment.

- Participate in capacity planning, road mapping, and evaluation of new End User Computing (EUC) technologies to continually enhance the user experience and service delivery.

Preferred Skills :

Certifications :

- Microsoft Certified : Endpoint Administrator Associate (MD-102), ITIL v4 Foundation.

Scripting Mastery :

- Advanced proficiency in PowerShell for deep-level automation, infrastructure maintenance, and complex troubleshooting.

Directory Services :

- In-depth knowledge of Active Directory (AD), Group Policy Objects (GPOs), and their seamless integration with Microsoft Entra ID (Azure AD) and Intune.

Network & Security :

- Strong understanding of networking concepts (TCP/IP, DNS, DHCP), firewall rules, and endpoint protection solutions (e.g., Microsoft Defender for Endpoint).

Cloud EUC :

- Experience with Azure Virtual Desktop (AVD) or other Virtual Desktop Infrastructure (VDI) solutions.

ITSM Tools :

- Proven experience working with enterprise IT Service Management (ITSM) platforms such as ServiceNow for incident, problem, and change management.

Vendor Management :

- Prior experience in coordinating with Microsoft Premier Support and other third-party vendors for critical incident resolution and strategic input.