- Device Enrollment & Onboarding : Manage device enrollment and provisioning for Windows, iOS/iPadOS, Android, and macOS platforms

- Device Configuration : Define, deploy, and maintain device configuration policies including security baselines, device restrictions, and settings catalogs

- Application Management : Deploy and manage applications (required and available), handle app assignments, updates, and Win32 app packaging

- Compliance & Security : Establish and enforce compliance policies aligned with organizational security requirements; manage remediation actions for non-compliant devices

- Conditional Access : Coordinate and enforce Conditional Access policies with Entra ID and Security teams to control device-based access

- Endpoint Security : Manage endpoint security policies including antivirus, Microsoft Defender, firewall, BitLocker, and attack surface reduction settings

- Patch Management : Configure and manage Windows Update rings, feature updates, and quality updates; monitor and report on patch compliance

- Device Health Monitoring : Monitor device health and compliance dashboards; identify and drive remediation of non-compliance, enrollment failures, and policy conflicts

- Incident Management : Handle Intune-related incidents and service requests including enrollment troubleshooting, app installation issues, compliance blocks, and access problems

- Device Lifecycle : Manage device lifecycle operations including retirement, wiping, reset, lost/stolen device handling, replacements, and offboarding

- Governance & Access Control : Maintain role-based access control (RBAC), manage admin access, and conduct audit reviews

- Reporting & Metrics : Deliver operational reporting and metrics including enrollment success rates, compliance percentages, patch compliance, and trend analysis

- Documentation & Knowledge Management : Create and maintain Intune runbooks and knowledge articles for Service Desk and NOC teams; document L1/L2 procedures and troubleshooting steps

- Automation : Identify and implement automation opportunities using PowerShell scripts, Microsoft Graph API, and standard workflows for repetitive administrative tasks

Required Qualifications :

Experience :

- 10+ years of experience in IT operations, systems administration, or endpoint management

- 5+ years of hands-on experience with Microsoft Intune and Microsoft Endpoint Manager (MEM)

- 10+ years of IT Infrastructure / Endpoint Management experience.

- Strong hands-on experience with Microsoft Intune and Microsoft Endpoint Manager (MEM).

- Expertise in Windows Autopilot, device enrollment, provisioning, and lifecycle management.

- Good knowledge of Microsoft Entra ID (Azure AD), Conditional Access, and device compliance policies.

- Experience creating and managing Configuration Profiles, security policies, and compliance policies.

- Hands-on experience with application deployment and Win32 app packaging through Intune.

- Strong understanding of Endpoint Security, Microsoft Defender, and BitLocker management.

- Experience with Patch Management, Windows Update Rings, and OS upgrade deployments.

- Knowledge of Role-Based Access Control (RBAC) and Intune administration.

- Strong PowerShell scripting skills for automation and troubleshooting.

- Experience working with Microsoft Graph API.

- Hands-on management of iOS/iPadOS, Android Enterprise, and macOS devices through Intune.

- Experience with compliance reporting, monitoring, troubleshooting, and issue remediation.

- Excellent problem-solving and support experience in enterprise environments.

- Notice Period Immediate or 10-15 days

- Job stability must be 2yrs in an organization