SCCM Administrator

Pyramid Consulting, Inc; Birmingham; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking an experienced SME/Architect for Endpoint Management with deep expertise in Microsoft Intune and enterprise device management.

You will design, implement, secure, and manage large-scale endpoint ecosystems across Windows, macOS, iOS and Android, ensuring robust policy enforcement and automation. The role requires hands-on leadership in Intune administration, configuration, and security baselines, with a focus on modern endpoint management and Zero Trust

Qualifications

• 5+ years of enterprise Endpoint Management using Intune in large-scale environments.
• Intune administration and architecture.
• Windows Autopilot, ABM/DEP, and Android Enterprise.
• Configuration Profiles, Compliance Policies, Security Baselines, and Proactive Remediations.
• Endpoint Security, Conditional Access, Defender for Endpoint, and Zero Trust principles.
• Win32 packaging, IntuneWin, macOS packaging, Apple VPP, and Managed Google Play.
• Windows Update for Business, Autopatch, and Quality Update Governance.
• Device encryption including BitLocker and FileVault.
• SCEP/PKCS certificates, Wi-Fi and VPN profiles.
• Microsoft Entra ID Device Management, Dynamic Groups, Device Filters, and RBAC.
• Advanced PowerShell scripting and automation; Graph API experience preferred.
• Strong knowledge of ITIL processes and enterprise security governance.

Responsibilities

• Design, implement, secure and manage large-scale endpoint environments across Windows, macOS, iOS and Android.
• Architect and guide enterprise endpoint management solutions with a focus on security and automation.
• Lead deployment of policies, devices enrollment, and compliance frameworks.
• Collaborate with security and IT teams to ensure Zero Trust and policy governance.

Skills

Intune / Endpoint Manager

PowerShell scripting

Automation

Zero Trust

RBAC

Windows Autopilot

Defender for Endpoint

MDM Security

Tools

Microsoft Intune

Apple Business Manager

Android Enterprise

Microsoft Defender

Graph API

SCEP/PKCS certs

BitLocker / FileVault

Job description

Location: Birmingham, UK – 3 days per week onsite

Employment Type: Full Time

Security Clearance: BPSS active or SC eligible

Work Arrangement: Office-based / Hybrid

Role Overview

We are looking for an experienced SME – Endpoint Management professional with strong expertise in Microsoft Intune and enterprise endpoint management. The successful candidate will be responsible for designing, implementing, securing, and managing large-scale endpoint environments across Windows, macOS, iOS, and Android platforms.

Required Skills & Experience

• 5+ years of enterprise Endpoint Management experience using Microsoft Intune / Microsoft Endpoint Manager in large-scale environments.
• Microsoft Intune administration and architecture.
• Windows Autopilot, Apple Business Manager (ABM/DEP), and Android Enterprise.
• Configuration Profiles, Compliance Policies, Security Baselines, and Proactive Remediations.
• Endpoint Security, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust principles.
• Win32 application packaging, IntuneWin, macOS package management, Apple VPP, and Managed Google Play.
• Windows Update for Business, Autopatch, Feature Update Management, and Quality Update Governance.
• Device encryption including BitLocker and FileVault.
• SCEP/PKCS certificates, Wi‑Fi and VPN profiles.
• Microsoft Entra ID Device Management, Dynamic Groups, Device Filters, and RBAC.
• Advanced PowerShell scripting and automation skills; Microsoft Graph API experience preferred.
• Strong understanding of Endpoint Security, PKI, Identity Management, Networking, and Cloud Technologies.
• Experience designing and implementing enterprise-scale endpoint management solutions.
• Strong knowledge of ITIL processes, including Incident, Change, Problem, Release, and Service Management.
• Eligible for UK Security Clearance.

Preferred Skills

• Endpoint architecture and migration experience from Configuration Manager (SCCM/MECM) to Intune.
• Experience with Microsoft Autopatch, Defender for Endpoint, and Microsoft Security ecosystem integrations.
• Advanced KQL, Log Analytics, Workbooks, and endpoint reporting experience.
• Experience developing custom remediation, automation, and self-healing solutions.
• ServiceNow integration, CMDB management, and endpoint asset governance experience.
• Exposure to Microsoft Copilot for Security and AI-driven endpoint operations.

Key Candidate Profile

The ideal candidate will be a senior hands-on Intune/Endpoint Management SME or Architect who has worked in large enterprise environments and can combine endpoint engineering, security, automation, architecture, and ITIL service management expertise.