Pncpl IT Specialist – Endpoint Management

Deltek; Bengaluru; On-site; INR 4,200,000 - 6,400,000; Full time

Job summary

Deltek is seeking a senior Desktop Engineer to own the DEX program and the end-to-end Windows and macOS device lifecycle with Intune and JAMF Pro. You will build proactive monitoring, automation, and remediation workflows, partnering with Security and ITSM.

The role demands deep experience in endpoint management, hybrid AD/Entra ID environments, and strong scripting skills. You will mentor the Desktop Engineering team, drive co-management migrations, and design security baselines and rollout

Qualifications

• Bachelor's Degree in Computer Science, IT, or related field.
• 8+ years in endpoint engineering or systems administration.
• Experience with Microsoft Intune and Apple JAMF Pro in a large-scale enterprise environment (2000+ devices).
• Strong PowerShell scripting and automation skills.
• Experience with AD/Entra ID and security fundamentals.

Responsibilities

• Own the DEX/endpoint programs (Intune, JAMF) for Windows and macOS across the fleet.
• Lead co-management migrations (SCCM to Intune) and define rollout strategies.
• Design and maintain security baselines, packaging, deployment, and retirement workflows.
• Develop AI-assisted automation to accelerate troubleshooting and remediation.
• Mentor Desktop Engineering team and collaborate with Security, Network, and ITSM.

Skills

Intune

JAMF Pro

PowerShell scripting

Automation & AI tooling

AI-assisted workflows

Scripting

Active Directory / Entra ID

Security fundamentals

Communication

Hybrid/AD environments

Education

Bachelor's Degree in Computer Science/IT

Tools

Intune

JAMF Pro

PowerShell

REST APIs

Active Directory

Job description

As the recognized global standard for project-based businesses, Deltek delivers software and information solutions to help organizations achieve their purpose. Our market leadership stems from the work of our diverse employees who are united by a passion for learning, growing and making a difference. At Deltek, we take immense pride in creating a balanced, values-driven environment, where every employee feels included and empowered to do their best work. Our employees put our core values into action daily, creating a one-of-a-kind culture that has been recognized globally. Thanks to our incredible team, Deltek has been named one of America's Best Midsize Employers by Forbes, a Best Place to Work by Glassdoor, a Top Workplace by The Washington Post and a Best Place to Work in Asia by World HRD Congress. www.deltek.com

At Deltek, security isn't a gate at the end of the process — it's in the foundation. Enterprise Security & Technology Services (ESTS) brings together security, infrastructure, and technology operations under one organization, led by our CISO, with a mandate to make sure Deltek builds and operates with integrity at every layer.

We're a passionate team of technologists and security professionals who work across the entire company — embedded in how services are built, delivered, and supported. We run agile, we embrace intelligent automation to amplify what our people can do, and we hold ourselves to a high standard because the organizations that depend on Deltek's platform are doing work that can't afford mistakes. If you take your craft seriously, want visibility into how a complex, global technology organization really operates, and believe security should be a first principle — not an afterthought — this is a team that will feel like home.

Digital Employee Experience (DEX)

• Own the DEX program, tracking employee-facing metrics such as boot/logon time, app responsiveness, and device health across Windows and macOS.
• Build proactive monitoring and remediation campaigns that detect experience issues before they become help desk tickets.
• Partner with Security and Service Management to convert DEX signals into prioritized remediation and user communication.
• Report DEX trends and outcomes to IT leadership, linking experience metrics to endpoint investments.

Intune – End-to-End Windows Device Lifecycle

• Own the Windows device lifecycle in Intune, including Autopilot provisioning, configuration, security baselines, apps, patching, compliance, and retirement.
• Lead phased co-management migration from SCCM to Intune, including workload transition decisions and roadmap toward cloud-native management.
• Design Intune profiles, security baselines, BitLocker, firewall, Windows Update rings, and Conditional Access alignment with Identity and Security teams.
• Own application packaging and deployment through Win32 apps, Store apps, and Company Portal self-service.
• Build automation for policy deployment, drift detection, troubleshooting, and fleet reporting.

JAMF – End-to-End macOS Device Lifecycle

• Own the macOS lifecycle in JAMF, including ADE enrollment, configuration, security baselines, apps, patching, compliance, and retirement.
• Lead Apple enrollment strategy and Apple ID governance for the macOS fleet.
• Maintain JAMF profiles and CIS-aligned security baselines such as FileVault and firewall with Security.
• Own JAMF Self Service, Apps & Books, packaging, distribution, and license management.
• Integrate JAMF workflows with vulnerability management and ITSM for unified patch governance.

AI-Assisted / Agentic Automation & Scripting

• Identify desktop engineering processes suitable for AI-assisted workflows, agentic automation, and human-in-the-loop orchestration.
• Design workflows that connect DEX, Intune, JAMF, vulnerability management, and ITSM signals to recommend or trigger approved remediation.
• Use AI to accelerate troubleshooting, summarize fleet trends, detect drift, and generate governed scripts, runbooks, and remediation logic.
• Build automation for endpoint policy deployment, drift detection, and reporting using PowerShell and REST APIs.
• Support vulnerability remediation automation by connecting detection, endpoint actions, and SLA governance.

Technical Leadership & Collaboration

• Serve as Level 3 escalation for complex endpoint management issues.
• Mentor Desktop Engineering team members on Intune, JAMF, automation, and troubleshooting best practices.
• Represent Desktop Engineering in planning with Security, Network, Identity, and Service Management teams.

Qualifications

• Bachelor's Degree: B.E., B.Tech, or B.Sc. in Computer Science, Information Technology (IT)
• Experience: 8+ years in endpoint engineering or systems administration, with at least 3 years focused specifically on Microsoft Intune and Apple JAMF Pro in a large-scale enterprise environment (2000+Devices).
• Intune depth: Proven experience owning the full device lifecycle in Intune — Autopilot provisioning, configuration/security baselines, application deployment, Windows Update rings, compliance policies, Conditional Access integration, and device retirement — including co-management transitions from SCCM.
• JAMF depth: Hands-on experience owning the full device lifecycle in JAMF Pro — zero-touch ADE/DEP enrollment, configuration/security baselines, application deployment (Self Service), Patch Management, compliance reporting, and device retirement — plus macOS scripting (Bash/Swift Dialog or similar).
• Digital Employee Experience (DEX): Hands-on experience with a DEX monitoring/analytics platform like Nexthink, Lakeside SysTrack, ControlUp..etc and a track record of using experience telemetry to drive proactive remediation campaigns and measurable improvements in employee-facing performance.
• AI and agentic automation: Practical experience using AI-assisted tooling to improve engineering productivity, generate or validate automation scripts, analyze endpoint telemetry, and build governed workflows that automate routine desktop engineering tasks.
• Automation & Scripting: Strong PowerShell scripting skills, with proven experience building automated workflows via REST API integrations across endpoint management and ITSM platforms.
• Active Directory & identity: Solid understanding of hybrid AD/Entra ID environments, group policy, and certificate-based authentication concepts.
• Security fundamentals: Familiarity with endpoint security tooling (EDR, vulnerability management) and least-privilege / application control concepts.
• Communication: Demonstrated ability to produce clear technical documentation and present recommendations to non-technical stakeholders.