Senior Endpoint Privilege Management Engineer – Intune

Stafide; Amsterdam; On-site; EUR 70,000 - 110,000; Full time

Job summary

Stafide is seeking an Endpoint Privilege Management Engineer to design, implement, and manage EPM solutions focusing on Microsoft Intune. You will strengthen endpoint security with LPAM, privilege elevation, and comprehensive policy management for Windows 10/11 environments.

The role requires hands-on expertise in Intune, Entra ID/Azure AD, AppLocker/WDAC, Defender for Endpoint, and PowerShell automation. Collaboration with security and IT teams is essential.

Qualifications

• 6–8 years of IT experience in endpoint management, Windows administration, endpoint security, or related roles.
• Hands-on experience with Microsoft Intune Endpoint Privilege Management (EPM).
• Expertise in LPAM and privilege elevation technologies.
• Understanding of Microsoft endpoint management and security solutions.
• Experience with Active Directory, Microsoft Entra ID, and Group Policy administration.
• Knowledge of AppLocker and WDAC.
• Familiarity with Defender for Endpoint and endpoint protection mechanisms.
• Strong PowerShell scripting and automation skills.
• Understanding of Zero Trust Security principles and IAM.
• Knowledge of ITIL processes, including Incident, Change, and Problem Management.

Responsibilities

• Design, implement, and manage Endpoint Privilege Management (EPM) solutions, particularly Microsoft Intune EPM.
• Implement Least Privilege Access Management (LPAM) and privilege elevation controls to strengthen endpoint security.
• Administer and secure Windows 10/11 endpoints, ensuring compliance with organizational security policies.
• Manage Microsoft Intune, Microsoft Endpoint Manager, and device compliance policies.
• Administer Active Directory, Microsoft Entra ID (Azure AD), and Group Policy Objects (GPO).
• Implement application control solutions using AppLocker and Windows Defender Application Control (WDAC).
• Support Microsoft Defender for Endpoint and other endpoint threat protection solutions.
• Develop PowerShell scripts to automate endpoint administration, security tasks, and reporting.
• Investigate security incidents, troubleshoot endpoint issues, and perform root cause analysis.
• Integrate EPM solutions with ServiceNow and other enterprise platforms.

Skills

Microsoft Intune EPM

LPAM (Least Privilege Access)

PowerShell scripting

Active Directory

Entra ID/Azure AD

Group Policy

AppLocker

WDAC

Defender for Endpoint

ITIL processes

Zero Trust IAM

ServiceNow integration

Tools

Microsoft Intune

Microsoft Endpoint Manager

AppLocker

WDAC

ServiceNow

Job description

Stafide is seeking an Endpoint Privilege Management Engineer to design, implement, and manage EPM solutions focusing on Microsoft Intune. You will strengthen endpoint security with LPAM, privilege elevation, and comprehensive policy management for Windows 10/11 environments.

The role requires hands-on expertise in Intune, Entra ID/Azure AD, AppLocker/WDAC, Defender for Endpoint, and PowerShell automation. Collaboration with security and IT teams is essential.