MS Intune EPM L3 Admin - Pan India

Tech Mahindra; Hyderabad, Pune District, Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Tech Mahindra is looking for an experienced Intune Administrator to join a hybrid role across Hyderabad, Bangalore, Pune, and PAN India. The candidate will manage Intune MEM, Autopilot deployments, and MDM/MAM, while supporting device provisioning and security baselines.

Immediate/30 days notice and rotation night shifts apply. The role requires 7 to 10 years of relevant experience with strong scripting and PowerShell skills for automation and reporting.

Qualifications

• Experience with Microsoft Intune MEM and device enrollment policies.
• Proficiency in Windows Autopilot deployments and zero-touch provisioning.
• Strong skills in SCCM/MECM co-management and software updates.
• Scripting with PowerShell for automation and reporting.

Responsibilities

• Intune Administration & Endpoint Management across Windows, iOS, Android, and macOS.
• Design and manage Autopilot deployments and device provisioning.
• Package and deploy Win32/MSI apps and manage Company Portal apps.
• Implement security baselines and conditional access policies.
• Develop PowerShell scripts and use Graph APIs for automation.
• Provide L3 support and create SOPs/knowledge articles.

Skills

Intune Administration

Windows Autopilot

Zero-Touch Deployment

Endpoint Security

Scripting

PowerShell

Patch Management

MDM/MAM

Tools

SCCM/MECM

Azure AD

Microsoft Defender

Job description

Role & responsibilities

Location: Hyderabad/Bangalore/Pune/PAN india

Work mode : Hybrid Exp : 7 to 10 Yrs only

Primary Skills : MS Intune admin, Windows Autopilot& Zero-Touch Deployment, Endpoint Security & Device Configuration

Notice Period : Immediate/30 Days only

Shift : 24/7 , 5 PM - 5 AM (Rotational shift - Night shift)

Mandatory Skills:

• Windows Autopilot & Zero-Touch Deployment
• Application Packaging & Deployment
• Patch Management & Update Rings
• Endpoint Security & Device Configuration Automation, Scripting & Intune Administration

Key Responsibilities

Intune Administration & Endpoint Management Manage and administer Microsoft Intune (MEM) platform. Configure and maintain device enrollment policies. Manage Configuration Profiles, Compliance Policies, and Security Baselines. Support Windows, iOS Android, macOS, and BYOD devices. Implement and manage Mobile Device Management (MDM) and Mobile Application Management (MAM). Autopilot & Device Provisioning Design and manage Windows Autopilot deployments. Support Zero-Touch provisioning and device lifecycle management. Configure Hybrid Azure AD Join and Entra ID Join scenarios. Application Management Package and deploy Win32, MSI, Microsoft Store, and Line-of-Business applications. Manage Company Portal applications. Troubleshoot application deployment failures. Create detection methods, requirement rules, and supersedence relationships. Security & Compliance Implement Conditional Access policies. Manage Defender for Endpoint integration. Configure BitLocker Windows Hello for Business, and Endpoint Security policies. Maintain compliance with organizational security standards. SCCM Co-Management Manage SCCM and Intune co-management workloads. Support workload migration from SCCM to Intune. Configure Software Updates, Compliance Policies, and Device Configuration workloads. Automation & Reporting Develop PowerShell scripts for automation and reporting. Utilize Microsoft Graph APIs for endpoint management tasks. Generate compliance and device health reports. Troubleshooting & Support Provide L3 support for complex endpoint incidents. Conduct Root Cause Analysis (RCA) for recurring issues. Handle escalations from L1/L2 teams. Create technical documentation, SOPs, and Knowledge Articles. Technical Skills Mandatory Microsoft Intune (MEM) Windows Autopilot Microsoft Entra ID (Azure AD) Conditional Access Endpoint Security Policies Windows 10/11 Administration PowerShell Scripting Microsoft Defender for Endpoint SCCM/MECM Co-Management MDM/MAM Concepts Required Certifications Microsoft Certified: Endpoint Administrator Associate (MD-102) Microsoft 365 Certified: Administrator Associate (Preferred) Azure Administrator (AZ-104) Preferred