Senior Microsoft Intune Engineer

Oxydata Software; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Part time

Job summary

Oxydata Software Sdn Bhd is seeking a Senior Microsoft Intune Engineer in Kuala Lumpur to lead and support the endpoint management workstream for a major Microsoft 365 migration. You will assess environments, design target configurations, and collaborate with security and identity teams to ensure secure, compliant device management across the enterprise.

This contract role requires 7–10 years of hands-on experience, strong scripting skills, and the ability to run workshops and produce runbooks

Qualifications

• Bachelor's degree in any related discipline.
• Microsoft Certified: Endpoint Administrator Associate (MD-102) or equivalent endpoint management cert.
• Microsoft identity, security, or Microsoft 365 certifications.
• Applicants must have legal right to work in Malaysia. Visa sponsorship not available.
• Hands-on experience with Microsoft Intune and enterprise endpoint management.
• Experience designing Windows 11 device management solutions.
• Experience migrating Workspace ONE to Intune or similar migrations.
• Experience with RBAC, scope tags, dynamic groups, security baselines, policy migration.
• Experience producing architecture documents, migration plans, runbooks, and operational guides.
• Experience with Defender for Endpoint, Windows Hello for Business, PKI, VPN, and Wi‑Fi profile deployment.

Responsibilities

• Assess existing Workspace ONE, ConfigMgr, Intune, and Windows endpoint environments.
• Review device inventory, OS versions, management status, groupings and policies.
• Identify migration prerequisites, constraints, dependencies and security gaps.
• Lead workshops to confirm device scope, priorities, sequencing, and design decisions.
• Develop migration inputs for risks, issues, dependencies, and remediation.
• Draft high-level and detailed designs for target endpoint management solution.
• Define Intune RBAC, scope tags, groups, and dynamic membership.
• Define endpoint security settings, baselines, and policy alignment.
• Collaborate with identity and security teams on CA and Entra ID controls.
• Prepare runbooks and configuration guides for migration activities.
• Plan migration waves, pilots, and deployment schedules from Workspace ONE to Intune.
• Validate enrolment and policy application post-migration.
• Track progress, exceptions and remediation across waves.
• Conduct knowledge transfer sessions and ensure proper documentation.

Skills

Intune expertise

Endpoint management

RBAC & scoping

Migration planning

Workshop facilitation

Education

Bachelor's degree

Tools

PowerShell

Workspace ONE

Microsoft Defender for Endpoint

Azure AD / Entra ID

Job description

Senior Microsoft Intune Engineer

Location: Kuala Lumpur, Malaysia

Work Mode: Onsite

Employment type: Contract

Experience Level: 7–10 years

Work Eligibility: Applicants must have the legal right to work in Malaysia. Visa sponsorship is not available for this position.

Oxydata Software Sdn Bhd established since 2012, helping regional enterprises drive digital transformation through Agentic AI Services, AI Automation & Integration, Data Engineering, AI Training, and IT Managed Services. We are a lean, high-impact team where engineers work directly on cutting-edge AI products serving enterprise clients across Malaysia and the region.

We are seeking an experienced Senior Microsoft Intune Engineer to lead and support the endpoint management workstream for a major Microsoft 365 migration project.

Responsibilities

• Assess existing Workspace ONE, Microsoft Configuration Manager, Microsoft Intune, and Windows endpoint management environments.
• Review device inventory, operating system versions, management status, user groupings, application requirements, and policy configurations.
• Identify migration prerequisites, technical constraints, dependencies, security gaps, and operational readiness requirements.
• Support and facilitate workshops to confirm device scope, migration priorities, sequencing, and design decisions.
• Develop and maintain risk, issue, dependency, and remediation inputs for the Intune workstream.
• Develop high-level and detailed designs for the target endpoint management solution, including device enrolment, provisioning, configuration, compliance, application deployment, and update management.
• Define Intune role-based access control, scope tags, assignment groups, and dynamic membership rules.
• Design endpoint security settings, encryption standards, security baselines, and policy alignment.
• Collaborate with identity and security teams on Conditional Access, Microsoft Entra ID, Microsoft Defender for Endpoint, and related controls.
• Configure or provide guidance for Intune tenant settings, enrolment profiles, configuration profiles, compliance policies, update rings, and endpoint security policies.
• Support the preparation, validation, and attestation of scripts used for migration or configuration activities.
• Develop migration approaches, pilot plans, migration waves, and deployment schedules for Workspace ONE to Intune migration.
• Support device unenrolment from Workspace ONE and enrolment into Microsoft Intune, including application deployment and configuration assignment.
• Validate enrolment status, policy application, application availability, and device compliance post-migration.
• Track migration progress, exceptions, defects, and remediation actions across deployment waves.
• Produce design documents, implementation guidance, configuration standards, operational guides, and migration runbooks.
• Conduct knowledge transfer sessions for administrators, engineering teams, and support teams.
• Ensure documentation reflects approved design decisions, implemented configurations, known issues, and operational ownership.

Requirements

Must-have:

• Bachelor’s degree in any related discipline.
• Microsoft Certified: Endpoint Administrator Associate (MD-102) or an equivalent current Microsoft endpoint management certification.
• Microsoft identity, security, or Microsoft 365 certifications.
• Applicants must have the legal right to work in Malaysia. Visa sponsorship is not available.
• Strong hands‑on experience with Microsoft Intune and enterprise endpoint management.
• Experience designing and delivering Windows 11 device management solutions.
• Experience with Workspace ONE to Intune migration or comparable endpoint management platform migrations.
• Experience with RBAC, scope tags, dynamic groups, security baselines, Group Policy assessment, and policy migration.
• Experience producing architecture documents, technical designs, migration plans, runbooks, configuration guides, and operational documentation.
• Experience with Microsoft Defender for Endpoint, Windows Hello for Business, PKI, NDES, SCEP, certificate-based authentication, VPN, and Wi‑Fi profile deployment.

Nice-to-have:

• Experience with automation of Intune configuration or migration activities using PowerShell or other scripting tools.
• Experience with Azure Active Directory Premium features (e.g., Privileged Identity Management, Identity Protection).
• Familiarity with device management in macOS or mobile platforms (iOS/Android) using Intune.
• Experience supporting large, geographically distributed enterprise environments.
• Strong knowledge of Microsoft Entra ID, Conditional Access, device compliance, configuration profiles, application protection policies, Windows update rings, endpoint security, and encryption controls.
• Ability to facilitate technical workshops and work across infrastructure, identity, security, application, service management, and project teams.
• Experience supporting endpoint transformation within financial services or another regulated industry.
• Strong troubleshooting, analytical, documentation, and stakeholder communication skills.
• Experience with Microsoft Configuration Manager and Intune co‑management.

Why Join Us

• Join a dynamic team driving a high-impact Microsoft 365 migration project for a leading organization.
• Opportunity to work with the latest endpoint management technologies, collaborate with talented professionals, and contribute to the transformation of enterprise IT operations.
• Excellent opportunity to further your expertise in Microsoft Intune and enterprise device management in a challenging and rewarding environment.