Endpoint Privilege Management Engineer (ID: 4128)

Stafide; Amsterdam; On-site; EUR 70,000 - 110,000; Full time

Job summary

Stafide is seeking an Endpoint Privilege Management Engineer to design, implement, and manage EPM solutions focusing on Microsoft Intune. You will strengthen endpoint security with LPAM, privilege elevation, and comprehensive policy management for Windows 10/11 environments.

The role requires hands-on expertise in Intune, Entra ID/Azure AD, AppLocker/WDAC, Defender for Endpoint, and PowerShell automation. Collaboration with security and IT teams is essential.

Qualifications

• 6–8 years of IT experience in endpoint management, Windows administration, endpoint security, or related roles.
• Hands-on experience with Microsoft Intune Endpoint Privilege Management (EPM).
• Expertise in LPAM and privilege elevation technologies.
• Understanding of Microsoft endpoint management and security solutions.
• Experience with Active Directory, Microsoft Entra ID, and Group Policy administration.
• Knowledge of AppLocker and WDAC.
• Familiarity with Defender for Endpoint and endpoint protection mechanisms.
• Strong PowerShell scripting and automation skills.
• Understanding of Zero Trust Security principles and IAM.
• Knowledge of ITIL processes, including Incident, Change, and Problem Management.

Responsibilities

• Design, implement, and manage Endpoint Privilege Management (EPM) solutions, particularly Microsoft Intune EPM.
• Implement Least Privilege Access Management (LPAM) and privilege elevation controls to strengthen endpoint security.
• Administer and secure Windows 10/11 endpoints, ensuring compliance with organizational security policies.
• Manage Microsoft Intune, Microsoft Endpoint Manager, and device compliance policies.
• Administer Active Directory, Microsoft Entra ID (Azure AD), and Group Policy Objects (GPO).
• Implement application control solutions using AppLocker and Windows Defender Application Control (WDAC).
• Support Microsoft Defender for Endpoint and other endpoint threat protection solutions.
• Develop PowerShell scripts to automate endpoint administration, security tasks, and reporting.
• Investigate security incidents, troubleshoot endpoint issues, and perform root cause analysis.
• Integrate EPM solutions with ServiceNow and other enterprise platforms.

Skills

Microsoft Intune EPM

LPAM (Least Privilege Access)

PowerShell scripting

Active Directory

Entra ID/Azure AD

Group Policy

AppLocker

WDAC

Defender for Endpoint

ITIL processes

Zero Trust IAM

ServiceNow integration

Tools

Microsoft Intune

Microsoft Endpoint Manager

AppLocker

WDAC

ServiceNow

Job description

• Function Business Analysis / Product Management
• Work Experience 6-8 years
• Country Netherlands

Job Description

As an Endpoint Privilege Management Engineer, you will

• Design, implement, and manage Endpoint Privilege Management (EPM) solutions, particularly Microsoft Intune EPM.
• Implement Least Privilege Access Management (LPAM) and privilege elevation controls to strengthen endpoint security.
• Administer and secure Windows 10/11 endpoints, ensuring compliance with organizational security policies.
• Manage Microsoft Intune, Microsoft Endpoint Manager, and device compliance policies.
• Administer Active Directory, Microsoft Entra ID (Azure AD), and Group Policy Objects (GPO).
• Implement application control solutions using AppLocker and Windows Defender Application Control (WDAC).
• Support Microsoft Defender for Endpoint and other endpoint threat protection solutions.
• Develop PowerShell scripts to automate endpoint administration, security tasks, and reporting.
• Investigate security incidents, troubleshoot endpoint issues, and perform root cause analysis.
• Integrate EPM solutions with ServiceNow and other enterprise platforms.

What You Bring to the Table

• 6–8 years of overall IT experience in endpoint management, Windows administration, endpoint security, or related infrastructure roles.
• Strong hands‑on experience with Microsoft Intune Endpoint Privilege Management (EPM).
• Expertise in Least Privilege Access Management (LPAM) and privilege elevation technologies.
• Good understanding of Microsoft endpoint management and security solutions.
• Experience with Active Directory, Microsoft Entra ID, and Group Policy administration.
• Knowledge of application control technologies such as AppLocker and WDAC.
• Familiarity with Microsoft Defender for Endpoint and endpoint protection mechanisms.
• Strong PowerShell scripting and automation skills.
• Understanding of Zero Trust Security principles and Identity & Access Management (IAM).
• Knowledge of ITIL processes, including Incident, Change, and Problem Management.

You should possess the ability to

• Analyze endpoint security requirements and implement appropriate privilege management solutions.
• Identify and resolve endpoint security vulnerabilities and privilege-related issues.
• Configure and maintain device compliance and security policies.
• Investigate security incidents and perform effective troubleshooting and root cause analysis.
• Collaborate with security, infrastructure, and business teams to implement endpoint security improvements.
• Integrate endpoint privilege management solutions with ServiceNow and other enterprise applications.

What we bring to the table

• An opportunity to work on enterprise-level endpoint security and privilege management initiatives.
• Exposure to Microsoft Intune, Endpoint Privilege Management, and modern endpoint security technologies.
• Opportunities to contribute to Zero Trust Security and Least Privilege implementation.
• A collaborative and technically challenging work environment.
• An opportunity to strengthen expertise in endpoint administration, automation, and security management.

Let’s Connect

Want to discuss this opportunity in more detail? Feel free to reach out.