Intune Platform & SME, Design and Build

Accenture PLC; Sydney; On-site; AUD 110,000 - 180,000; Full time

Benefits offered by this job

Career development opportunities

Exposure to enterprise Microsoft 365 &

Job summary

Avanade is seeking an Intune Platform SME to lead design and implementation of a comprehensive endpoint management solution. You will configure enrolment, security baselines, and deployment profiles, while ensuring smooth integration with Entra ID, Defender for Endpoint, and Windows Autopilot.

You will provide technical leadership for testing, troubleshooting, and handover to operations. The role emphasizes governance, RBAC, and cross-team collaboration with security, identity, and deployment

Qualifications

• Detailed design and build of the Microsoft Intune platform.
• Experience integrating Intune with Entra ID and Defender for Endpoint.
• Strong knowledge of Windows Autopilot, device enrolment, and RBAC governance.

Responsibilities

• Lead detailed design and build of the Intune platform.
• Configure enrolment, restrictions, and administrative controls.
• Design Autopilot registration, provisioning, and deployment profiles.
• Implement device configurations, compliance policies, and security baselines.
• Integrate Intune with Entra ID, Conditional Access, Defender for Endpoint.
• Configure RBAC, scope tags, and platform governance.
• Design application deployment, update management, and endpoint monitoring.
• Support onboarding and management of Windows and mobile devices.
• Lead testing, troubleshooting, and handover documentation.

Skills

Intune architecture

Microsoft Entra ID

Windows Autopilot

RBAC

PowerShell & Graph

Endpoint security

Tools

Microsoft Graph

Microsoft Defender for Endpoint

Azure AD

Job description

Role Description

The Intune Platform SME is responsible for the detailed design, build, configuration, and validation of the Microsoft Intune platform supporting the client environment. The role establishes the core endpoint management platform and implements the policies, profiles, enrolment controls, security configurations, and operational capabilities required to manage Windows endpoints and supported mobile devices. Working closely with the Modern Workplace Technical Architect, SOE Engineer, identity and security teams, the role ensures that Intune integrates effectively with Microsoft Entra ID, Windows Autopilot, Microsoft Defender for Endpoint, Conditional Access, and related Microsoft 365 services. The role also provides technical leadership for platform testing, troubleshooting, operational readiness, and handover.

Key Responsibilities

• Lead the detailed design and build of the Microsoft Intune platform.


• Configure device enrolment, platform restrictions, enrolment profiles, and administrative controls.


• Design and implement Windows Autopilot registration, provisioning, and deployment profiles.


• Configure device configuration profiles, compliance policies, security baselines, and endpoint security policies.


• Implement Intune integration with Microsoft Entra ID, Conditional Access, and Microsoft Defender for Endpoint.


• Configure role-based access control, scope tags, administrative boundaries, and platform governance.


• Design application deployment, update management, reporting, and endpoint monitoring capabilities.


• Support the onboarding and management of approved Windows, mobile, and thin-client devices where applicable.


• Lead platform testing, troubleshooting, defect resolution, and configuration validation.


• Produce detailed designs, configuration documentation, operational procedures, and handover materials.


• Provide specialist guidance to SOE, application packaging, security, identity, and deployment teams.


• Support platform transition to client operational and support teams.

Key Skills

Microsoft Intune architecture, design, and implementation Windows Autopilot and device enrolment Microsoft Entra ID and Conditional Access Microsoft Defender for Endpoint integration Windows 11 endpoint management Intune role-based access control and scope tags Device configuration and compliance policies Endpoint security and Microsoft security baselines Windows Update for Business and Autopatch Application deployment and Win32 application management Mobile Application Management and Mobile Device Management Endpoint Analytics, monitoring, and reporting FIDO2, certificate-based authentication, and device identity PowerShell and Microsoft Graph automation Platform troubleshooting and technical documentation .

Preferred Experience

Designing and implementing Microsoft Intune for large enterprise environments. Delivering Intune and Windows Autopilot solutions in government or highly regulated environments. Integrating Intune with Microsoft Entra ID, Conditional Access, Microsoft Defender for Endpoint, and Microsoft 365 services. Supporting complex device enrolment, rebuild, repurposing, and lifecycle management scenarios. Implementing least-privilege administration, security baselines, compliance controls, and platform governance. Supporting enterprise endpoint transformation programs through design, build, testing, and transition to operations.

You must be an Australian citizen to apply; security clearance is highly regarded . At Avanade, we advance the world through the power of people and Microsoft. Join us to shape your skills and the future with bold ideas and innovative solutions. Our partnership with Microsoft and Accenture empowers you to unlock your full potential. Working at Avanade offers the chance to build a career path that suits your skills and interests and the freedom to be your authentic self. We are committed to your growth, well-being, and success. This is where passion meets opportunity, technology meets humanity, and every challenge is a chance to make a genuine impact on colleagues, clients, and communities. Together, we do what matters.