Microsoft Intune / Endpoint Administrator (Contract)

Health Data Max, LLC; Hyderabad; Hybrid; INR 1,100,000 - 1,700,000; Full time

Job summary

Health Data Max, LLC in Hyderabad, India, is seeking an experienced device management administrator to design and maintain our enterprise Windows management stack. You will deploy and govern Intune, Entra ID, Autopilot, and BitLocker across a fully remote laptop fleet while ensuring HIPAA alignment and secure operations.

The role requires strong PowerShell scripting, documentation, and English communication, plus experience in a distributed, remote environment.

Qualifications

• 4+ years administering Microsoft Intune and Microsoft Entra ID for Windows devices.
• Hands-on experience with Windows Autopilot, remote wipe, and device recovery.
• Strong knowledge of compliance policies, Conditional Access, BitLocker, and Windows LAPS.
• Experience managing a fully remote device fleet without on-site access.

Responsibilities

• Initial setup: assess and design Microsoft 365/Entra ID/Intune configuration; enroll devices; configure Autopilot.
• Security: build device compliance policies; configure Conditional Access; deploy Defender for Endpoint and manage updates.
• Ongoing administration: onboarding/offboarding, deploy apps, monitor compliance, maintain runbooks.

Skills

Microsoft Intune

Microsoft Entra ID

Windows Autopilot

Endpoint Management

Conditional Access

BitLocker

Windows LAPS

Microsoft Defender

PowerShell

Microsoft 365 Administration

Tools

Microsoft Defender for Endpoint

Microsoft Graph

Job description

Health Data Max provides a cloud-based clinical AI analytics platform for the US healthcare market. We issue Windows laptops to a distributed team and handle protected health information, so our devices must be centrally managed and secure. We need an experienced administrator to set up device management properly and then maintain it.

Key responsibilities

1. Initial setup

• Assess the current Microsoft 365, Entra ID, and Intune configuration and recommend a target design.
• Join all corporate Windows laptops to Microsoft Entra ID and enrol them in Intune.
• Recover and reset corporate laptops
• Configure Windows Autopilot so that new and reassigned laptops provision themselves.
• Set up BitLocker encryption with recovery key escrow and Windows LAPS.

2. Security and compliance

• Build device compliance and configuration policies and security baselines.
• Configure Conditional Access so that only compliant devices reach company data.
• Deploy Microsoft Defender for Endpoint and manage Windows updates.
• Align device controls with HIPAA requirements and document them for audits.

3. Ongoing administration

• Handle employee onboarding and offboarding: provisioning, access removal, remote wipe, and reassignment.
• Deploy and update standard applications.
• Monitor compliance reports and resolve device issues remotely.
• Maintain runbooks so that routine tasks can be performed by in-house staff.

Requirements

• 4+ years administering Microsoft Intune and Microsoft Entra ID for Windows devices.
• Hands-on experience with Windows Autopilot, remote wipe, and device recovery.
• Strong knowledge of compliance policies, Conditional Access, BitLocker, and Windows LAPS.
• Experience managing a fully remote device fleet without on-site access.
• PowerShell scripting for automation.
• Clear written documentation and good spoken English.

Preferred qualifications

• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102).
• Experience with Microsoft Defender for Endpoint and Microsoft Graph.
• Experience in a HIPAA, SOC 2, or similarly regulated environment.
• Experience supporting small companies or startups as a sole administrator.
• Broader Microsoft 365 administration (Exchange Online, Teams, SharePoint).

Key skills: Microsoft Intune, Microsoft Entra ID, Windows Autopilot, Endpoint Management, Conditional Access, BitLocker, Windows LAPS, Microsoft Defender, PowerShell, Microsoft 365 Administration