SOE/Infrastructure Engineer

Paxus; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

Paxus is seeking an experienced Windows endpoint management professional in Canberra to manage Intune-based packaging and deployment for Windows 11 devices. You will configure Intune policies, Autopilot provisioning and review SCCM/MECM workflows across hybrid and cloud environments.

The role emphasizes scripting in PowerShell, technical writing, and collaboration with cyber security and project teams to deliver secure, modern desktop solutions.

Qualifications

• Extensive experience in Win32 and MSIX packaging, updating and deploying modern cloud-based Windows platforms, specifically Intune Windows 11 devices.
• Experience developing, configuring, supporting, managing and troubleshooting Intune configuration for hybrid and cloud joined Windows 11 devices.
• Experience configuring and supporting Microsoft endpoint services in cloud and hybrid environments such as Windows Desktop SOE, Intune, SCCM/MECM, Entra, DNS, DHCP and Always-On VPN.
• Skill in preparing written communications and materials such as knowledge base articles and technical instructional documents.
• Demonstrated experience in development of design, architecture, and as-built configuration documentation.

Responsibilities

• Package, test and deploy applications using Microsoft Intune (Win32 and MSIX).
• Configure and administer Intune device management and endpoint configuration policies.
• Review SCCM/MECM OS deployment task sequences and enhance Windows Autopilot automation processes.
• Implement and support application control, endpoint security controls and SOE compliance requirements.
• Develop PowerShell scripts to automate deployment, configuration and operational support activities.
• Produce technical documentation, knowledge articles, support procedures and implementation guides.
• Provide Level 3 technical support for SOE, application packaging and endpoint management services.
• Collaborate with project, infrastructure, cyber security and service providers to deliver desktop outcomes.

Skills

PowerShell scripting

Technical writing

Change management

Tools

Microsoft Intune (Endpoint Manager)

Intune Autopilot

SCCM/MECM

WDAC

AirLock

Job description

Security clearance

Must have Negative Vetting Level 1

Job details

• Ensuring requestable software applications and hardware drivers on the Windows 11 devices are maintained at a supported version and patched using the Microsoft Intune endpoint management solution.
• Documentation, configuration of Intune App deployment packaging (Win32 and MSIX) and lifecycle management
• Troubleshooting application authentication and solution development as part of a transition of hybrid joined Windows 11 devices to an Entra joined Windows 11 SOE with Passwordless Experience.
• Prepare written communications and materials such as knowledge base articles and technical instructional documents.
• Review of Windows 11 hybrid and cloud joined device configuration and compliance policies.

This role will support department delivery of projects, initiatives and working alongside a vendor.

Key duties and responsibilities

• Package, test and deploy applications using Microsoft Intune (Win32 and MSIX).
• Configure and administer Intune device management and endpoint configuration policies.
• Review SCCM/MECM operating system deployment task sequences and enhance Windows Autopilot automation processes.
• Implement and support application control, endpoint security controls and SOE compliance requirements.
• Develop PowerShell scripts to automate deployment, configuration and operational support activities.
• Produce technical documentation, knowledge articles, support procedures and implementation guides.
• Provide Level 3 technical support for SOE, application packaging and endpoint management services.
• Work collaboratively with project, infrastructure, cyber security and service providers to deliver desktop outcomes.
• Support release, change and incident management processes associated application deployments.
• Understanding of technical release and incident management
• Working understanding of Entra ID, Entra Kerberos authentication, Active Directory and Configuration Profiles from hybrid and cloud device perspective, with on-premises accessed resources.
• Endpoint security, compliance and desktop hardening.

Technical skills

• Strong experience with Intune App deployment packaging (Win32 and MSIX) and lifecycle management
• Microsoft Intune (Endpoint Manager) administration, configuration and compliance policies.
• Intune Autopilot deployment and device provisioning.
• SCCM/MECM operating system deployment and task sequence administration.
• Application control technologies such as AirLock and WDAC.
• Experience in PowerShell Scripting
• Strong technical writing and change management (raising changes)

Essential criteria

Weighting

• Extensive experience in Win32 and MSIX apps packaging, updating and deploying modern cloud-based Windows platforms, specifically Intune Windows 11 devices.
• Experience with developing, configuring, supporting, managing and troubleshooting Intune configuration for hybrid and cloud joined Windows 11 devices.
• Experience configuring and supporting Microsoft endpoint services in cloud and hybrid environments such as Windows Desktop SOE, Intune, SCCM/MECM, Entra, DNS, DHCP and Always-On VPN.
• Skill in preparing written communications and materials such as knowledge base articles and technical instructional documents.
• Demonstrated experience in development of design, architecture, and as-built configuration documentation.

Desirable criteria

• Experience in Intune configuration and management of supervised apple iOS mobile devices, including mobile application deployment.
• Experience transitioning from traditional SCCM-dependent environments to modern management and full Autopilot deployments.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.