Systems Engineering Specialist Advisor - MDM & Endpoint Management

NTT DATA BUSINESS SOLUTIONS; Dadri; On-site; INR 3,000,000 - 5,500,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS in India seeks a Senior Subject Matter Expert to lead complex Windows end-user support in an Intune-managed enterprise. You will design secure device policies, automate patching, optimize cloud deployments, and oversee Autopilot provisioning across thousands of endpoints.

The role requires deep expertise in Microsoft Intune, PowerShell automation, and Modern Device Management. You will work with IT teams to ensure policy compliance, incident resolution at L2/L3, and

Qualifications

• Bachelor's degree in computer science, IT, or equivalent.
• 11+ years in IT infrastructure with 8+ years in Intune and Modern Workplace.
• Strong knowledge of Windows 10/11, GPOs, CSPs, and modern management.

Responsibilities

• Lead device provisioning lifecycle using Intune, Autopilot, ESP profiles.
• Manage patching with WUfB, feature updates, and app deployments.
• Design endpoint compliance policies and integrate with Entra ID for conditional access.
• Act as L2/L3 escalation for complex Intune incidents and automate tasks with PowerShell.

Skills

Microsoft Intune

PowerShell scripting

Modern Device Management

Education

Bachelor's degree in Computer Science or IT

Tools

SCCM

Windows Autopilot

Azure AD Entra ID

Job description

Job Summary

As a Senior Subject Matter Expert, you will be the primary escalation point for complex Windows end-user issues within an Intune-managed enterprise environment. You will focus on designing secure device policies, automating patching, optimizing cloud deployments, and ensuring seamless hardware provisioning (Autopilot) across thousands of endpoints.

We are specifically looking for candidates with deep expertise in

• Microsoft Intune


• strong automation capabilities through PowerShell scripting.


• The environment is heavily focused on Modern Device Management endpoint automation.

Key Responsibilities

1. Device Provisioning Lifecycle Management

• Administer and maintain Windows 10/11 endpoints via Microsoft Intune


• Configure, deploy, and troubleshoot Windows Autopilot and Enrollment Status Page (ESP) profiles for out-of-box user setups.

2. Patch Management Application Deployment

• Manage and configure Windows Update for Business (WUfB) rings, feature updates, and expedited quality updates.


• Package, test, and deploy applications (Win32, MSI, MSIX) to global user bases using Intune.


• Manage and monitor software distribution lifecycles and application catalogs.

3. Policy Management Compliance

• Design and enforce endpoint compliance policies, configuration profiles, and security baselines (e.g., BitLocker, firewall rules, and password policies).


• Integrate Intune with Azure AD (Entra ID) to implement conditional access policies.


• Continuously monitor device compliance and system health using Endpoint Analytics and generate compliance reports for stakeholders.

4. L2/L3 Incident Management Automation

• Serve as an escalated tier for resolving complex Intune-related provisioning, policy conflicts, and application deployment failures.


• Write and maintain PowerShell scripts to automate routine system administration, patching, and endpoint remediation tasks.


• Conduct Root Cause Analysis (RCA) for escalated infrastructure/device incidents to ensure SLA adherence.

Required Qualifications

• Education: Bachelors degree in Computer Science, Information Technology, or equivalent experience.


• Experience: 11+ years of proven experience in IT infrastructure, with at least 8+ years strictly focused on Microsoft Intune, SCCM, and Modern Workplace management.


• Deep Knowledge on Windows Ecosystem: Advanced understanding of Windows 10/11 OS architecture, Windows Registry, and hardware troubleshooting. Extensive knowledge of Group Policy Objects (GPOs), CSPs, ADMX, and transition to Modern Management.


• Scripting: Strong, hands-on ability to write PowerShell scripts for automation and debugging.

Preferred Certifications

• Certifications: Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) or equivalent.


• Data Analytics: Familiarity with Power BI or KQL for reporting and monitoring compliance dashboards.