Senior Intune & Microsoft Endpoint Administrator

Aeries Technology; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Aeries Technology is seeking a Senior Intune & Endpoint Administrator to lead enterprise device management across Windows endpoints, Autopilot, and patch strategies. The role demands hands-on expertise in Intune, Entra ID, Azure resources, and security hardening within a global IT environment.

You will design configurations, automate repetitive tasks with PowerShell, maintain documentation, and collaborate with cross-functional teams to ensure compliance and optimal device health.

Qualifications

• Graduate or postgraduate with IT background.
• 5-7+ years of endpoint management experience.
• Strong hands-on with Microsoft Intune and Windows endpoints.
• Experience with Windows Autopilot/Autopatch and Entra ID RBAC/CA.
• Ability to document processes and generate operational reports.

Responsibilities

• Design, configure, administer, monitor, and optimize Intune for Windows endpoints.
• Manage Windows device lifecycle: deployment, patching, security hardening, compliance.
• Administer MDM/MAM policies, enrollment, device restrictions, and CA integration.
• Handle Autopilot configuration and patch management strategies.
• Administer Entra ID, Azure subscriptions, VMs, and Windows Server environments.
• Provide PowerShell automation and ITSM support.

Skills

Analytical thinking

Written & verbal communication

Independence & collaboration

Production systems ownership

Education

Bachelor's degree in Computer Science/IT/Engineering

Tools

Jamf

Veeam

Veritas

ServiceDesk Plus

ServiceNow

Microsoft Copilot

Microsoft Graph

Job description

Position/Title: Senior Intune & Microsoft Endpoint Administrator

Experience: 5-7+ years

Qualification: Graduate / Postgraduate

Department: IT

Employment type: Full Time

Location: Hyderabad

Gender : Male only

Shifts (if any): -

About Aeries:

Aeries Technology is a Nasdaq listed (AERT) global professional services and consulting partner, with offices in the USA, India, Mexico, Singapore, and UAE. We provide Private Equities, its Portfolio Companies and mid-market companies with the right mix of deep vertical specialty, functional expertise, and the right systems & solutions to scale, optimize and transform their business operations with unique customized engagement models. Aeries is Great Place to Work certified by GPTW Institute, reflecting our commitment to fostering a positive and inclusive workplace culture for our employees.

For more information, log on to http://www.aeriestechnology.com

Roles & Responsibilities:

• Microsoft Intune & Endpoint Management: Own the design, configuration, administration, monitoring, and continuous improvement of Microsoft Intune for Windows endpoints, including configuration profiles, compliance policies, applications, security baselines, certificates, restrictions, reporting, and remediation.
• Windows Device Management: Lead the end-to-end lifecycle of Windows devices covering provisioning, configuration, application deployment, security hardening, compliance, patching, troubleshooting, and retirement.
• MDM / MAM Administration: Administer enterprise Mobile Device Management and, where applicable, Mobile Application Management policies, enrollment, device restrictions, application protection, compliance, and Conditional Access integration.
• Windows Autopilot: Own Autopilot configuration and management, including device registration, deployment profiles, Enrollment Status Page, pre-provisioning, user-driven deployment, application assignment, troubleshooting, and lifecycle processes.
• Windows Autopatch & Patch Management: Design and manage Windows Autopatch and Intune patching, including update rings, feature and quality updates, driver/firmware strategies, monitoring, compliance, rollback, and remediation.
• Microsoft Entra ID: Administer users, groups, device identities, administrative roles, RBAC, Conditional Access, SSO, authentication controls, enterprise applications, and identity lifecycle processes.
• Azure Resource Management: Manage Azure subscriptions, resource groups, RBAC, virtual machines, storage, networking components, monitoring, governance, and cost/consumption controls; support Azure requirements from engineering and IT teams.
• Windows Server Administration: Administer and troubleshoot Windows Server environments including Active Directory, DNS, DHCP, Group Policy, file services, patching, permissions, performance, and integration with Entra ID and endpoint management.
• Backup & Recovery: Administer and monitor Veeam and/or Veritas backup solutions, including backup jobs, repositories, retention, alerts, restoration, recovery testing, and compliance reporting.
• macOS Management: Manage macOS devices using Intune, ensuring secure configuration, patching, compliance, and operational health.
• Security & Compliance: Implement endpoint and identity security controls aligned with organizational policies, audit requirements, and regulatory standards; support remediation and evidence collection.
• PowerShell & Automation: Develop PowerShell automation for Intune, Entra ID, Azure, Windows administration, compliance checks, remediation, reporting, and repetitive operational tasks.
• ITSM & Technical Support: Provide advanced technical support through ServiceDesk Plus, ServiceNow, or similar ITSM platforms and own complex incidents, requests, problems, and changes.
• Monitoring, Reporting & Documentation: Produce reports covering device compliance, patch status, enrollment, applications, Azure consumption, backup status, and security posture; maintain SOPs and technical documentation.
• GenAI & Process Improvement: Use approved GenAI tools such as Microsoft Copilot to improve productivity, documentation, analysis, troubleshooting, reporting, and automation while following security policies.
• Collaboration & Projects: Work with Infrastructure, Network, Security, Service Desk, HR, Engineering, and business teams on endpoint, identity, cloud, security, and infrastructure projects.

Requirements for the role:

• 57+ years of experience in endpoint management, systems administration, infrastructure, or a similar senior IT role.
• Strong hands-on experience with Microsoft Intune and enterprise Windows endpoint management.
• Strong understanding of MDM/MAM, device enrollment, compliance, configuration profiles, application deployment, and endpoint security.
• Hands-on experience with Windows Autopilot, including device registration, deployment profiles, ESP, pre-provisioning, and troubleshooting.
• Hands-on experience with Windows Autopatch and/or advanced Intune patch management, including update rings and feature/quality update policies.
• Strong Microsoft Entra ID administration experience covering users, groups, device identities, RBAC, Conditional Access, SSO, and enterprise applications.
• Hands-on Azure resource management experience covering subscriptions, resource groups, RBAC, VMs, storage, monitoring, and governance.
• Strong Windows Server administration experience including Active Directory, DNS, DHCP, Group Policy, patching, permissions, and troubleshooting.
• Experience with Veeam and/or Veritas backup, restore, retention, monitoring, and recovery testing.
• Strong PowerShell scripting and automation skills; Microsoft Graph automation experience is an advantage.
• Experience with Jamf for macOS management is preferred.
• Experience with ServiceDesk Plus, ServiceNow, or comparable ITSM platforms.
• Strong troubleshooting skills across endpoint, identity, server, cloud, and application deployment issues.
• Ability to produce technical documentation, SOPs, operational reports, and audit evidence.

Skills/Certifications:

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Veeam or Veritas backup certification
• Jamf certification

Education:

Bachelors degree in computer science, Information Technology, Engineering, or a related discipline, or equivalent practical experience.

Core Competencies:

• Strong analytical and problem-solving capability.
• Excellent written and verbal communication skills.
• Ability to explain technical concepts to technical and non-technical stakeholders.
• Strong ownership and accountability for production systems.
• Ability to work independently and collaborate across cross-functional teams.
• Strong change-management, documentation, and operational discipline.
• Ability to manage multiple priorities in a fast-paced enterprise IT environment.

Key Technology Area:

AreaTechnologies / PlatformsEndpoint ManagementMicrosoft Intune, Windows, MDM/MAMProvisioningWindows AutopilotPatch ManagementWindows Autopatch, Intune Update RingsIdentityMicrosoft Entra ID, RBAC, Conditional Access, SSOCloudMicrosoft AzureServerWindows Server, Active Directory, DNS, DHCP, GPOBackupVeeam, VeritasmacOSJamfAutomationPowerShell, Microsoft GraphITSMServiceDesk Plus / ServiceNowGenAIMicrosoft Copilot

The Job responsibilities of the candidate shall include but not limited to the Job Description & to perform any other tasks/functions as required by the Company.