Senior Service Engineer

Providence India; Hyderabad; On-site; INR 1,100,000 - 1,700,000; Full time

Job summary

Qualifications

• Hands-on experience in MECM/SCCM and Intune management and deployments.
• Strong scripting in PowerShell for automation and reporting.
• Good understanding of Azure AD, device identities and Conditional Access.

Responsibilities

• Manage MECM/SCCM and Intune configurations, policies, collections, groups and deployments.
• Create, modify and test endpoint configurations and policies.
• Deploy and troubleshoot enterprise applications via MECM and Intune across Windows endpoints.
• Support Windows Autopilot provisioning, ESP, app installation and enrollment failures.
• Oversee Windows OS deployment, feature updates and security baselines.
• Monitor compliance, patching and security posture; remediate issues.
• Troubleshoot MECM/Intune client issues using logs and event viewers.
• Develop PowerShell scripts for automation and reporting.
• Coordinate with regional IT/service teams for endpoint issue resolution.
• Participate in on-call rotations and maintain configurations docs.

Skills

MECM/SCCM

Intune

PowerShell scripting

Azure AD

Windows 10/11 administration

Tools

Endpoint deployment tooling

Job description

• Support and administer Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune environments, including policies, configurations, collections/groups, and deployments.
• Create, modify, test, deploy, and maintain endpoint configurations and policies in MECM and Intune.
• Deploy and troubleshoot enterprise applications through MECM and Intune across a large Windows endpoint environment.
• Support and troubleshoot Windows Autopilot provisioning, including profile assignments, Enrollment Status Page (ESP), application installation, and enrollment failures.
• Support Windows operating system deployment (OSD), feature updates, quality updates, and configuration changes.
• Implement and maintain endpoint security configurations using Intune security policies, security baselines and BitLocker.
• Monitor and remediate device compliance, configuration, patching, and security posture to meet organizational standards.
• Support vulnerability remediation and endpoint hardening initiatives by deploying required configurations, patches, applications, and remediation scripts.
• Monitor endpoint health and troubleshoot client issues related to MECM agents, Intune enrollment, policy processing, application deployments, Windows Updates, and device compliance.
• Troubleshoot complex endpoint deployment and configuration issues using relevant MECM/Intune logs, Windows Event Logs, and diagnostic tools.
• Develop and maintain PowerShell scripts for endpoint administration, troubleshooting, reporting, and automation.
• Collaborate with regional IT/service desk teams, security teams, application owners, and infrastructure teams to resolve endpoint-related issues.
• Participate in on-call/support rotations as required and maintain technical documentation for configurations, deployments, operational procedures, and troubleshooting.

Required Skills

• 3-5 years of hands-on experience with Microsoft MECM/SCCM and/or Microsoft Intune, with strong practical experience in at least one and working knowledge of the other.
• Hands-on experience with:
• Configuration profiles and compliance policies
• Windows Update management / patching
• Device enrollment and provisioning
• Endpoint troubleshooting
• PowerShell scripting
• Good understanding of Microsoft Entra ID (Azure AD), device identities, GroupPolicy, security groups, and Conditional Access concepts.
• Good understanding of Windows 10/11 endpoint administration and troubleshooting.
• Ability to analyze deployment failures using MECM client logs, Intune diagnostics, Windows Event Viewer, and registry/configuration data.