Sr MDM Engineer

Unisys; San Pedro Garza García; Remote; MXN 800,000 - 1,200,000; Full time

Job summary

Unisys is seeking a Senior MDM Engineer to own design, deployment, and day-to-day management of our endpoint ecosystem across Windows, MacOS, iOS, and Android. You will work at the center of our Microsoft 365 and Intune environment, handling imaging, packaging, software distribution, MAM/MDM, and endpoint security.

The role requires deep Microsoft stack expertise and practical experience with Apple and Android device management, plus comfort working with bilingual Spanish/English teams.

Qualifications

• 5+ years of experience in endpoint/systems engineering with a focus on device management.
• Hands-on expertise with Microsoft Intune (MDM/MAM policies, compliance, app deployment).
• Solid knowledge of Azure AD and on-premises Active Directory.
• Experience with SCCM (ConfigMgr) administration and troubleshooting.
• Working knowledge of Microsoft 365 administration as it relates to endpoints.
• Experience with Microsoft Defender for Endpoint and endpoint security controls.
• Fluency in Spanish and English (spoken and written).
• Project management and execution skills for cross-functional initiatives.

Responsibilities

• Design, configure, and administer Microsoft Intune for enrollment, policies, profiles, and app deployment across Windows, MacOS, iOS, and Android.
• Manage hybrid Active Directory / Azure AD environments, including GPOs and conditional access.
• Support migration from SCCM to cloud-native Intune management and maintain legacy SCCM where used.
• Build OS images using traditional methods and Windows Autopilot for zero-touch provisioning.
• Package, test, and deploy software across the fleet with version control.
• Develop and maintain PowerShell and shell scripts for automation and remediation.
• Administer Apple Business Manager for iOS/MacOS enrollment and licensing; manage Android via Knox.
• Coordinate with security and IT teams to align endpoint policies with compliance and risk requirements.
• Lead end-to-end endpoint projects: scoping, timelines, resourcing, risk tracking.
• Provide training and guidance to junior engineers and support staff.

Skills

Endpoint engineering

Microsoft Intune (MDM/MAM)

Azure AD / Active Directory

SCCM (ConfigMgr) administration

Microsoft 365 administration

Microsoft Defender for Endpoint

Spanish & English fluency

Project management

Tools

Intune management tools

Windows Autopilot

Apple Business Manager

Samsung Knox

Job description

What Success Looks Like In This Role

Work Modality: Home Office -Mexico Home-Based. However, if the candidate is based in a city with a client site, occasional hybrid attendance may be required.

Summary Of Role

We are looking for a Senior MDM Engineer to own the design, deployment, and day‑to‑day management of our enterprise endpoint ecosystem across Windows, MacOS, iOS, and Android. This role sits at the center of our Microsoft 365 and Intune environment, with hands‑on responsibility for imaging, packaging, software distribution, mobile application and device management (MAM/MDM), and endpoint security. The ideal candidate combines deep technical expertise in the Microsoft stack with practical experience supporting Apple and Android device management and is comfortable working with bilingual (Spanish/English) teams and stakeholders.

Main Responsibilities

• Design, configure, and administer Microsoft Intune for device enrollment, compliance policies, configuration profiles, and app deployment across Windows, MacOS, iOS, and Android.
• Manage hybrid Active Directory / Azure AD environments, including group policies, conditional access, and identity-related endpoint configurations.
• Maintain and evolve legacy SCCM infrastructure where still in use, and support migration paths from SCCM to cloud-native (Intune) management.
• Build and maintain OS images using both traditional imaging methods and Windows Autopilot for zero-touch provisioning.
• Package, test, and deploy software across the device fleet, ensuring reliable distribution and version control.
• Develop and maintain scripts (PowerShell, shell, or similar) to automate provisioning, configuration, remediation, and reporting tasks.
• Administer Apple Business Manager for iOS/MacOS device enrollment, app licensing (VPP), and supervised device configuration.
• Manage Android devices via Android Enterprise and Samsung Knox for corporate-owned and BYOD scenarios.
• Implement and maintain endpoint security controls using Microsoft Defender (for Endpoint and related workloads) and support data protection initiatives via Microsoft Purview.
• Support and administer the broader Microsoft 365 environment as it relates to endpoint and identity management.
• Troubleshoot and resolve complex device, application, and connectivity issues escalated from Tier 1/2 support.
• Document processes, standards, and configurations, and provide guidance to junior engineers and support staff.
• Collaborate with security, infrastructure, and help desk teams to align endpoint policies with organizational compliance and security requirements.
• Plan and lead endpoint management projects end to end — scoping, timelines, resourcing, and risk tracking — for initiatives such as OS migrations, MDM roll‑outs, and tooling changes.
• Coordinate with cross-functional stakeholders and vendors to keep project milestones on track, and report progress and risks to leadership.
• Conduct training sessions and workshops for clients and internal teams on Endpoint best practices.

You will be successful in this role if you have:

Job Qualifications

Must Have Skills

• Qualifications:
  • 5+ years of experience in endpoint/systems engineering, with a strong focus on device management.
  • Hands‑on expertise with Microsoft Intune (MDM/MAM policies, compliance, app deployment).
  • Solid working knowledge of Azure AD and on‑premises Active Directory.
  • Experience with SCCM (ConfigMgr) administration and troubleshooting.
  • Working knowledge of Microsoft 365 administration as it intersects with endpoint management.
  • Practical experience with Microsoft Defender for Endpoint and Endpoint Security controls.
• Familiarity with Microsoft Purview for data protection/compliance.
• Experience with traditional OS imaging and Windows Autopilot deployment.
• Software packaging and distribution experience (e.g., Win32 apps, MSI/scripted installs).
• Scripting proficiency, particularly PowerShell, for automation and remediation.
• Experience administering Apple Business Manager and managing MacOS/iOS devices.
• Experience with Samsung Knox and Android Enterprise device management.
• Demonstrated ability to support a multi‑platform environment (Windows, MacOS, iOS, Android).
• Fluent in Spanish and English (spoken and written).
• Project management and execution skills: planning, prioritizing, and driving multi‑stakeholder technical projects to completion.

Skills

• Proficiency in SCCM and Intune management and operation.
• Patch and software distribution knowledge.
• Strong knowledge of modern management devices.
• Creation and maintenance of builds (computer images).
• Experience in scripting for automation.
• Excellent problem‑solving and communication skills.
• Ability to work independently and as part of a team.
• Customer Service: Strong customer service orientation and experience in a customer‑facing role.
• Project Management: Basic understanding of project management principles and tools.

Nice to Have

• Portuguese language proficiency.
• Relevant certifications (e.g., Microsoft Certified: Endpoint Administrator Associate, Modern Desktop Administrator, or equivalent).
• Experience with Jamf or other Apple‑focused MDM tools.
• Exposure to Zero Trust security frameworks and conditional access design.
• Experience in regulated or multinational enterprise environments.
• Familiarity with ITSM tools (e.g., ServiceNow) for change and incident management.
• Excellent problem‑solving and communication skills.
• Ability to work independently and as part of a team.
• Strong customer service orientation and experience in a customer‑facing role.
• Project Management: Basic understanding of project management principles and tools.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [e-mail] or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys’ EEO commitment here.