Senior Microsoft Intune Specialist

Paramount Computer Systems; Coimbatore District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Paramount Computer Systems seeks a Senior Microsoft Intune Specialist to own design, implementation and day-to-day management of a unified endpoint management environment. You will lead enrollment, policy design, and application deployment across Windows, iOS, Android, and macOS.

The role requires hands-on expertise with Intune Suite features (Endpoint Privilege Management, Advanced Analytics, Remote Help) and close collaboration with security teams to integrate Defender for Endpoint.

Qualifications

• 5+ years of experience in Microsoft endpoint management with a strong Intune focus.
• Experience enrolling devices across Windows, iOS, Android and macOS.
• Experience deploying applications and managing policy lifecycle.

Responsibilities

• Own end-to-end lifecycle of the Intune environment including enrollment and policy management.
• Design device enrollment strategies across Windows, iOS, Android, and macOS.
• Build and maintain compliance policies and conditional access with Entra ID.
• Manage application deployment and update strategies across platforms.
• Utilize Intune Suite features such as Endpoint Privilege Management and Analytics.
• Collaborate with security on Defender for Endpoint integration.

Skills

Microsoft Intune

Endpoint management

Autopilot enrollment

Entra ID policy

PowerShell/Graph API

MDM/MAM concepts

Defender for Endpoint

Tools

PowerShell

Graph API

SCCM/MECM

Intune Suite

Job description

Job Title: Senior Microsoft Intune Specialist / Endpoint Management Engineer

Experience Required: 5+ Years (Endpoint Management & Modern Workplace)

About the Role

We are looking for an experienced Microsoft Intune Specialist to join our internal IT team, owning the design, implementation, and day-to-day management of our unified endpoint management (UEM) environment. This role requires deep, hands-on expertise in core Intune device/app management along with strong working knowledge of Microsoft Intune Suite advanced capabilities.

Key Responsibilities

• Own the end-to-end lifecycle of our Intune environment — enrollment, configuration, policy management, monitoring, and continuous improvement
• Design and manage device enrollment strategies across Windows (Autopilot), iOS/iPadOS, Android (Enterprise/AE), and macOS
• Build and maintain compliance policies, configuration profiles, and conditional access integration with Entra ID
• Manage application deployment, packaging, and update strategies (Win32 apps, MSIX, LOB apps, store apps) across platforms
• Administer Intune Suite advanced features, including:
• Endpoint Privilege Management (EPM)
• Advanced Endpoint Analytics
• Remote Help
• Manage co-management scenarios and hybrid/cloud-native transitions from Configuration Manager (SCCM/MECM) where applicable
• Implement and maintain update management policies (Windows Update for Business, feature/quality update rings)
• Troubleshoot device compliance, enrollment failures, policy conflicts, and app deployment issues
• Collaborate with security team on integrating Intune with Defender for Endpoint for risk-based conditional access
• Maintain internal documentation: configuration standards, policy matrices, and operational runbooks
• Provide guidance and support to service desk/L1-L2 teams on endpoint management issues
• Liaise with Microsoft support and external vendors when required for escalations or advisory support
• Stay current with Intune roadmap updates and evaluate new features for adoption

Required Skills & Experience

• 5+ years of experience in Microsoft endpoint management, with a strong focus on Microsoft Intune
• Device enrollment (Autopilot, Apple Business Manager/ABM, Android Enterprise)
• Compliance and configuration policy design across Windows, iOS, Android, macOS
• Application deployment and lifecycle management
• Conditional access integration with Entra ID
• Working knowledge of Microsoft Intune Suite features: Endpoint Privilege Management, Advanced Endpoint Analytics, Remote Help, Enterprise App Management, Cloud PKI, Microsoft Tunnel
• Solid understanding of Windows Autopilot, co-management with Configuration Manager, and Windows Update for Business
• Familiarity with PowerShell/Graph API for Intune automation and reporting
• Understanding of mobile device management (MDM) and mobile application management (MAM) concepts
• Experience integrating with Microsoft Defender for Endpoint
• Relevant certifications preferred (e.g., MD-102, MS-102)