Modern Workplace Technical Expert

Keoni; Paris; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

Keoni seeks an expert to harmonize and secure Windows 11 and Microsoft Intune across the organization. You will define architecture, standards, and governance, drive a 3-year roadmap, and industrialize administration with automation.

You will deliver architecture documents, security configurations, and operating procedures, while transferring knowledge to production teams and aligning with the group's security strategy.

Qualifications

• Expertise in Microsoft Intune, Windows 11 and endpoint management.
• Ability to stay informed and self-teach new technologies.
• Strong knowledge of security in enterprise workstation environments.

Responsibilities

• Provide leadership on Intune, Windows 11, and endpoint management strategies.
• Develop a standardized target platform and security policies.
• Industrialize and automate administration and deployment activities.
• Create architecture and operational documentation for governance.

Skills

Microsoft Intune

Azure

Windows 11

Endpoint management

Security policies

Tools

PowerShell

Remediation Scripts

Configuration Profiles

Job description

Context: As part of the transformation and modernization of its digital work environment, the client is pursuing a path of harmonizing its technical foundations, strengthening the security of its workstations, and optimizing their administration. This approach is particularly aligned with the evolution of Microsoft environments, centered around Windows 11, Microsoft Intune, and associated Unified Endpoint Management (UEM) services. To support this momentum, an expert mission is required to provide strategic and operational support regarding architectural choices, configuration standards, security mechanisms, and best practices for administration and governance. The objective is to contribute to the convergence of technical foundations, improve the level of compliance and security of equipment, while ensuring a high-performing, consistent user experience tailored to the company's needs.MISSIONS: – Conduct technological monitoring, propose innovations, and build a 3-year roadmap – Be a technical expert on Microsoft Intune/Azure solutions – Develop the hardware and software catalog – Build the product backlog, prioritize, define, and schedule deliveries – Qualify change requests and contribute to study reports – Ensure the technical and functional consistency of our solutions – Lead, facilitate, explain, and present technical topics during committee meetings – Industrialize and automate the implementation of our solutions – Contribute to the development of architecture documents and operational documentation – Ensure knowledge transfer to production teams – Participate in projects and incident/problem resolution – Ensure the solutions comply with the group's security strategy – Manage our software and hardware assets (compliance, obsolescence, costs, etc.) – Maintain relationships with strategic vendors in the work environment – Promote our service offerings (Demos, webinars, etc.) – Measure user satisfaction, number of incidents, ...Required skills: – Microsoft Intune / Azure / Windows 11 – Microsoft, Android, iOS, and macOS environmentsIn addition, the following skills must be possessed: – Ability to self-taught and stay informed1. Expertise and Consulting : Provide leading expertise on Microsoft Intune, Windows 11, and the Endpoint Management ecosystem. Advise teams on Microsoft best practices for modern endpoint management. Conduct opportunity, impact, and feasibility studies on proposed changes. Contribute to defining the Workplace roadmap and the evolution paths for the platforms. 2. Platform Harmonization: Analyze existing configurations and identify configuration discrepancies. Design and recommend a standardized target platform for Windows 11 and Intune. Participate in streamlining configuration, compliance, and security policies. Define associated technical standards, documentation, and repositories.3. Securing Environments : Support the deployment of Microsoft security recommendations. Strengthen endpoint compliance mechanisms. Optimize configurations related to Microsoft Defender, BitLocker, Windows Hello for Business, Credential Guard, Application Control, and other security components. Contribute to reducing the attack surface and improving the security maturity level of workstations.4. Administration and Industrialization : Support teams in the implementation and optimization of Intune policies (Configuration Profiles, Compliance Policies, Conditional Access, PowerShell Scripts, Remediation Scripts, etc.). Participate in the automation of administration and deployment activities. Contribute to the continuous improvement of workstation operation and administration processes.5. Workplace Project Support : Support user environment migration or upgrade projects. Participate in scoping, design, testing, and deployment phases. Analyze complex incidents or technical issues requiring advanced expertise. Serve as a technical expert for project and operations teams.6. Skills Transfer : Produce the necessary technical deliverables (architecture documents, operational documentation, procedures, configuration guides). Facilitate technical workshops and knowledge-sharing sessions. Ensure the upskilling of internal teams on Microsoft Workplace technologies.Expected deliverables: Architecture and design documents. Recommendations for harmonizing and securing the underlying infrastructure. Standards and best practice documents. Migration plans and roadmaps. Operating and administration procedures. Workshop reports and technical studies. Dashboards and indicators for monitoring implemented actions. This service is part of a strategic and operational support approach aimed at ensuring the consistency, security, maintainability, and sustainability of the company's Windows 11 and Microsoft Intune environments.Application: CV + cover letter + copies of diplomas to be sent to [e-mail]