Microsoft M365 & Intune Specialist

We are seeking an experienced Microsoft Intune & M365 Professional to join our IT team. The ideal candidate will have 8-10 years of hands-on experience managing enterprise endpoint environments using Microsoft Intune with strong working knowledge across the Microsoft 365 ecosystem. You will be responsible for designing deploying and governing device management solutions that ensure security compliance and productivity across the organization.

KEY RESPONSIBILITIES

Endpoint Management & Deployment

• Design implement and manage Microsoft Intune (MEM) for Windows macOS iOS and Android devices across the organization.
• Configure and manage Autopilot profiles for zero-touch Windows device provisioning.
• Deploy and maintain device compliance policies configuration profiles and conditional access policies.
• Manage device enrollment methods including BYOD corporate-owned and shared device scenarios.
• Oversee lifecycle management for endpoints procurement through decommissioning.

Security & Compliance

• Implement and enforce endpoint security baselines using Microsoft Defender for Endpoint and Intune security policies.
• Configure Microsoft Purview compliance policies DLP (Data Loss Prevention) and Information Protection labels.
• Manage Conditional Access policies in Microsoft Entra ID (Azure AD) for risk-based access control.
• Conduct regular compliance audits and remediation across managed device fleet.
• Support ISO 27001 / SOC 2 compliance initiatives related to endpoint management.

Microsoft 365 Administration

• Administer Microsoft 365 services including Exchange Online Teams SharePoint Online and OneDrive for Business.
• Manage Microsoft Entra ID (Azure AD) user and group management SSPR MFA FIDO2/passkeys and PIM.
• Configure and manage Microsoft 365 Apps deployment via Intune and Office Deployment Tool (ODT).
• Support tenant-level configurations including security defaults admin roles and service health monitoring.
• Assist with M365 tenant governance licensing optimization and adoption reporting via Microsoft 365 Admin Center.

Automation & Scripting

• Write and maintain PowerShell scripts for automation of Intune Entra ID and M365 administration tasks.
• Leverage Microsoft Graph API for bulk operations reporting and advanced management scenarios.
• Build and maintain deployment packages and Win32 app wrappers for Intune app delivery.

Collaboration & Support

• Act as Level 3 escalation point for Intune and M365-related incidents and service requests.
• Collaborate with security networking and helpdesk teams on endpoint-related projects and issue resolution.
• Maintain up-to-date documentation for configurations runbooks and standard operating procedures.
• Provide training and guidance to junior IT staff on Intune and M365 best practices.

REQUIRED QUALIFICATIONS

• 810 years of experience in IT infrastructure with a focus on Microsoft Intune and endpoint management.
• Deep expertise in Microsoft Intune / Microsoft Endpoint Manager (MEM) policies profiles compliance and app deployment.
• Strong hands-on experience with Microsoft 365 workloads: Exchange Online Teams SharePoint OneDrive and Entra ID.
• Proficient in PowerShell scripting and Microsoft Graph API for automation and reporting.
• Experience with Windows Autopilot Azure AD Join Hybrid Azure AD Join and modern provisioning workflows.
• Solid understanding of Conditional Access MFA Identity Protection and Zero Trust principles.
• Working knowledge of Microsoft Defender for Endpoint and endpoint security hardening.
• Familiarity with ITIL-based processes incident change and problem management.

PREFERRED QUALIFICATIONS

• Microsoft Certified: Modern Desktop Administrator Associate (MD-102) or equivalent.
• Microsoft 365 Certified: Enterprise Administrator Expert (MS-102).
• Experience with Microsoft Sentinel Defender XDR or Microsoft Purview compliance portal.
• Exposure to tenant-to-tenant (T2T) migration projects using tools like AvePoint FLY or BitTitan.
• Knowledge of SCCM / Configuration Manager and co-management scenarios.
• Experience with non-Microsoft MDM platforms (Jamf VMware Workspace ONE) is a plus.
• Familiarity with GRC frameworks ISO 27001 NIST or CIS benchmarks as applied to endpoint security.

Required Experience:

Staff IC