MS Intune Admin

Tech Mahindra; Hyderabad, Pune District, Bengaluru; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

Tech Mahindra is seeking an Microsoft Intune Administrator to serve as SME for enterprise endpoint management. You will design, implement, administer, and troubleshoot MEM across Windows, macOS, iOS, and Android, ensuring security and end-user experience.

You will lead Autopilot deployments and hybrid Azure AD Join strategies while coordinating with L3 teams. Responsibilities include app packaging/deployment, MDM/MAM, Defender integration, SCCM co-management, and automation using PowerShell.

Qualifications

• Microsoft Intune MEM expertise required for enterprise endpoint management.
• Experience with Windows Autopilot deployments and Hybrid Azure AD Join.
• Proficient in Entra ID, Conditional Access and endpoint security policies.
• Strong PowerShell scripting and automation capabilities.
• Experience administering SCCM/MECM co-management environments.

Responsibilities

• Administer and optimize Microsoft Intune platform across devices.
• Configure enrollment policies, profiles, compliance, and security baselines.
• Support Windows, macOS, iOS, and Android devices including BYOD.
• Design Autopilot deployments and zero-touch provisioning workflows.
• Manage App deployment for Win32, MSI, Store apps, and LOB apps.
• Implement and maintain MDM/MAM, Conditional Access, and Defender integration.
• Oversee SCCM co-management workloads and migrations to Intune.
• Develop PowerShell scripts and leverage Graph APIs for automation.
• Produce documentation, SOPs and knowledge articles; mentor junior engineers.

Skills

Microsoft Intune (MEM)

Windows Autopilot

Microsoft Entra ID

Conditional Access

Endpoint Security Policies

Windows 10/11 Administration

PowerShell Scripting

Defender for Endpoint

SCCM/MECM Co-Management

MDM/MAM Concepts

Tools

Graph API

JAMF (Mac Management)

Apple Business Manager (ABM)

Apple VPP/DEP

Android Enterprise

PKI, SCEP, NDES

Azure Automation

Job description

Role Summary

Microsoft Intune Administrator serves as the SME for Microsoft Intune and Modern Endpoint Management. The role is responsible for designing, implementing, administering, and troubleshooting enterprise endpoint management solutions across Windows, macOS, iOS, and Android platforms, ensuring security, compliance, and operational excellence while delivering a seamless end-user experience.

Key Responsibilities

Intune Administration & Endpoint Management

• Manage and administer Microsoft Intune (MEM) platform.


• Configure and maintain device enrollment policies.


• Manage Configuration Profiles, Compliance Policies, and Security Baselines.


• Support Windows, iOS, Android, macOS, and BYOD devices.


• Implement and manage Mobile Device Management (MDM) and Mobile Application Management (MAM).

Autopilot & Device Provisioning

• Design and manage Windows Autopilot deployments.


• Support Zero-Touch provisioning and device lifecycle management.


• Configure Hybrid Azure AD Join and Entra ID Join scenarios.

Application Management

• Package and deploy Win32, MSI, Microsoft Store, and Line-of-Business applications.


• Manage Company Portal applications.


• Troubleshoot application deployment failures.


• Create detection methods, requirement rules, and supersedence relationships.

Security & Compliance

• Implement Conditional Access policies.


• Manage Defender for Endpoint integration.


• Configure BitLocker, Windows Hello for Business, and Endpoint Security policies.


• Maintain compliance with organizational security standards.

SCCM Co-Management

• Manage SCCM and Intune co-management workloads.


• Support workload migration from SCCM to Intune.


• Configure Software Updates, Compliance Policies, and Device Configuration workloads.

Automation & Reporting

• Develop PowerShell scripts for automation and reporting.


• Utilize Microsoft Graph APIs for endpoint management tasks.


• Generate compliance and device health reports.

Troubleshooting & Support

• Provide L3 support for complex endpoint incidents.


• Conduct Root Cause Analysis (RCA) for recurring issues.


• Handle escalations from L1/L2 teams.


• Create technical documentation, SOPs, and Knowledge Articles.

Technical Skills

Mandatory

• Microsoft Intune (MEM)


• Windows Autopilot


• Microsoft Entra ID (Azure AD)


• Conditional Access


• Endpoint Security Policies


• Windows 10/11 Administration


• PowerShell Scripting


• Microsoft Defender for Endpoint


• SCCM/MECM Co-Management


• MDM/MAM Concepts

Preferred

• Apple Business Manager (ABM)


• Apple VPP/DEP


• Android Enterprise


• PKI, SCEP, NDES


• Azure Automation


• Graph API


• JAMF (Mac Management)

Required Certifications

• Microsoft Certified: Endpoint Administrator Associate (MD-102)


• Microsoft 365 Certified: Administrator Associate (Preferred)


• Azure Administrator (AZ-104) Preferred

Soft Skills

• Excellent troubleshooting and analytical skills.


• Strong client-facing communication.


• Experience handling critical incidents and escalations.


• Documentation and KT expertise.


• Ability to mentor L1/L2 engineers.

Roles & Expectations

• Act as Intune SME for enterprise endpoint management.


• Lead implementation and migration projects.


• Drive service improvements and automation initiatives.


• Participate in architecture and design discussions.


• Support audits, compliance reviews, and governance activities.

Typical Interview Focus Areas

• Intune Architecture


• Autopilot Deployment Models


• SCCM to Intune Migration


• Conditional Access & Compliance Policies


• Win32 App Packaging & Deployment


• Co-management Workloads


• Defender for Endpoint Integration


• PowerShell & Graph API Automation


• iOS/Android Device Management


• Troubleshooting Intune Enrollment & Sync Issues