Sr Microsoft Intune Specialist

Paramount; Coimbatore District; On-site; INR 2,000,000 - 3,500,000; Full time

Job summary

Paramount seeks a Senior Microsoft Intune Specialist to own the design, deployment, and day-to-day management of our unified endpoint management environment. You will lead enrollment, policy, and app strategies across Windows, macOS, iOS, and Android, interfacing with security for Defender integration and Entra ID.

The role requires deep hands-on Intune expertise, co-management experience, and strong automation using PowerShell/Graph API, with a focus on ongoing optimization and documentation.

Qualifications

• 5+ years experience in Microsoft endpoint management with Intune focus.
• Hands-on device enrollment in Autopilot, ABM, and Android Enterprise.
• Designs policies across Windows/iOS/Android/macOS.
• Manages app deployment and lifecycle in enterprise environments.
• Integrates conditional access with Entra ID.
• Familiar with Intune features: EPM, AEA, Remote Help, Cloud PKI, MS Tunnel.
• Knowledge of Windows Autopilot and co-management with SCCM.
• Experience with PowerShell/Graph API for automation and reporting.
• Understanding of MDM/MAM concepts and Defender for Endpoint integration.

Responsibilities

• Own end-to-end lifecycle of the Intune environment, from enrollment to policy mgmt.
• Design and manage device enrollment strategies across Windows, iOS, Android, macOS.
• Build/maintain compliance policies and conditional access with Entra ID.
• Manage application deployment and update strategies across platforms.
• Collaborate with security for Defender for Endpoint integration.
• Document configuration standards, policy matrices, and runbooks.
• Provide guidance to service desk on endpoint management issues.

Skills

Intune

Endpoint Management

Autopilot

Entra ID

PowerShell/Graph

MDM/MAM

Tools

SCCM/MECM

Graph API

Job description

Job Title: Senior Microsoft Intune Specialist / Endpoint Management Engineer

Experience Required: 5+ Years (Endpoint Management Modern Workplace)

About the Role

We are looking for an experienced Microsoft Intune Specialist to join our internal IT team, owning the design, implementation, and day-to-day management of our unified endpoint management (UEM) environment. This role requires deep, hands-on expertise in core Intune device/app management along with strong working knowledge of Microsoft Intune Suite advanced capabilities.

Key Responsibilities

• Own the end-to-end lifecycle of our Intune environment - enrollment, configuration, policy management, monitoring, and continuous improvement
• Design and manage device enrollment strategies across Windows (Autopilot), iOS/iPadOS, Android (Enterprise/AE), and macOS
• Build and maintain compliance policies, configuration profiles, and conditional access integration with Entra ID
• Manage application deployment, packaging, and update strategies (Win32 apps, MSIX, LOB apps, store apps) across platforms

Administer Intune Suite advanced features, including:

1. Endpoint Privilege Management (EPM)
2. Advanced Endpoint Analytics
3. Remote Help
4. Enterprise App Management
5. Cloud PKI
6. Microsoft Tunnel for Mobile Application Management

• Manage co-management scenarios and hybrid/cloud-native transitions from Configuration Manager (SCCM/MECM) where applicable
• Implement and maintain update management policies (Windows Update for Business, feature/quality update rings)
• Troubleshoot device compliance, enrollment failures, policy conflicts, and app deployment issues
• Collaborate with security team on integrating Intune with Defender for Endpoint for risk-based conditional access
• Maintain internal documentation: configuration standards, policy matrices, and operational runbooks
• Provide guidance and support to service desk/L1-L2 teams on endpoint management issues
• Liaise with Microsoft support and external vendors when required for escalations or advisory support
• Stay current with Intune roadmap updates and evaluate new features for adoption

Required Skills Experience

• 5+ years of experience in Microsoft endpoint management, with a strong focus on Microsoft Intune
• Deep, hands-on expertise in:
• Device enrollment (Autopilot, Apple Business Manager/ABM, Android Enterprise)
• Compliance and configuration policy design across Windows, iOS, Android, macOS
• Application deployment and lifecycle management
• Conditional access integration with Entra ID
• Working knowledge of Microsoft Intune Suite features: Endpoint Privilege Management, Advanced Endpoint Analytics, Remote Help, Enterprise App Management, Cloud PKI, Microsoft Tunnel
• Solid understanding of Windows Autopilot, co-management with Configuration Manager, and Windows Update for Business
• Familiarity with PowerShell/Graph API for Intune automation and reporting
• Understanding of mobile device management (MDM) and mobile application management (MAM) concepts
• Experience integrating with Microsoft Defender for Endpoint
• Relevant certifications preferred (e.g., MD-102, MS-102)