Senior Microsoft Intune Specialist

Paramount Computer System; Tamil Nadu; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Paramount Computer System in Tamil Nadu seeks an experienced Senior Microsoft Intune Specialist to own design, deployment, and ongoing management of our unified endpoint management environment.

You will drive enrollment, policy, and app lifecycles across Windows, iOS, Android, and macOS, leverage Intune Suite features (EPM, analytics, Remote Help), and collaborate with security for Defender integration.

Qualifications

• 5+ years of experience in Microsoft endpoint management.
• Deep expertise in Microsoft Intune and device enrollment technologies.
• Strong knowledge of Autopilot, Entra ID, and compliance policies.

Responsibilities

• Own end-to-end lifecycle of the Intune environment including enrollment, configuration, policy management, monitoring, and continuous improvement.
• Design and manage device enrollment strategies across Windows (Autopilot), iOS/iPadOS, Android (Enterprise/AE), and macOS.
• Build and maintain compliance policies, configuration profiles, and conditional access integration with Entra ID.
• Manage application deployment, packaging, and update strategies across platforms.
• Administer Intune Suite advanced features including Endpoint Privilege Management, Advanced Endpoint Analytics, and Remote Help.
• Collaborate with security team on integrating Intune with Defender for Endpoint for risk-based conditional access.

Skills

Microsoft Intune

Endpoint management

Autopilot

Entra ID

Policy design

PowerShell

Graph API

MDM/MAM concepts

Co-management

Defender integration

Job description

Job Title: Senior Microsoft Intune Specialist / Endpoint Management Engineer

Experience Required: 5+ Years (Endpoint Management & Modern Workplace)

About the Role

We are looking for an experienced Microsoft Intune Specialist to join our internal IT team, owning the design, implementation, and day-to-day management of our unified endpoint management (UEM) environment. This role requires deep, hands-on expertise in core Intune device/app management along with strong working knowledge of Microsoft Intune Suite advanced capabilities.

Key Responsibilities

• Own the end-to-end lifecycle of our Intune environment — enrollment, configuration, policy management, monitoring, and continuous improvement
• Design and manage device enrollment strategies across Windows (Autopilot), iOS/iPadOS, Android (Enterprise/AE), and macOS
• Build and maintain compliance policies, configuration profiles, and conditional access integration with Entra ID
• Manage application deployment, packaging, and update strategies (Win32 apps, MSIX, LOB apps, store apps) across platforms
• Administer Intune Suite advanced features, including:
• Endpoint Privilege Management (EPM)
• Advanced Endpoint Analytics
• Remote Help
• Manage co-management scenarios and hybrid/cloud-native transitions from Configuration Manager (SCCM/MECM) where applicable
• Implement and maintain update management policies (Windows Update for Business, feature/quality update rings)
• Troubleshoot device compliance, enrollment failures, policy conflicts, and app deployment issues
• Collaborate with security team on integrating Intune with Defender for Endpoint for risk-based conditional access
• Maintain internal documentation: configuration standards, policy matrices, and operational runbooks
• Provide guidance and support to service desk/L1-L2 teams on endpoint management issues
• Liaise with Microsoft support and external vendors when required for escalations or advisory support
• Stay current with Intune roadmap updates and evaluate new features for adoption

Required Skills & Experience

• 5+ years of experience in Microsoft endpoint management, with a strong focus on Microsoft Intune
• Device enrollment (Autopilot, Apple Business Manager/ABM, Android Enterprise)
• Compliance and configuration policy design across Windows, iOS, Android, macOS
• Application deployment and lifecycle management
• Conditional access integration with Entra ID
• Working knowledge of Microsoft Intune Suite features: Endpoint Privilege Management, Advanced Endpoint Analytics, Remote Help, Enterprise App Management, Cloud PKI, Microsoft Tunnel
• Solid understanding of Windows Autopilot, co-management with Configuration Manager, and Windows Update for Business
• Familiarity with PowerShell/Graph API for Intune automation and reporting
• Understanding of mobile device management (MDM) and mobile application management (MAM) concepts
• Experience integrating with Microsoft Defender for Endpoint
• Relevant certifications preferred (e.g., MD-102, MS-102)