Digital Identity & Privileged Access Management Senior Endpoint Administrator

EY GDS; Taguig; On-site; PHP 1,004,000 - 1,674,000; Full time

Job summary

EY GDS in Manila is seeking an IT professional to manage enterprise devices using Microsoft Intune and Defender for Endpoint, ensuring devices remain compliant, secure, and operational while assisting in troubleshooting and incident response.

You will configure baselines, support Autopilot deployments, integrate Intune with Conditional Access, deploy applications, patch management, and maintain clear documentation.

Qualifications

• Hands-on experience with Microsoft Intune’s compliance, configurations, application, and update deployments.
• Hands-on experience with Defender for Endpoint basic to intermediate configuration and alert handling.
• Experience in creating or managing endpoint conditional access policies.
• Azure AD and Entra ID concepts for endpoint security.
• Understanding of Windows OS administration and endpoint security fundamentals.
• Ability to troubleshoot endpoint and policy-related issues.
• Excellent leadership skills.

Responsibilities

• Manage and support device enrollment (Windows, iOS, Android).
• Configure and maintain configuration, compliance, and security baseline.
• Support integration of Intune compliance with Conditional Access.
• Deploy and manage applications (Win32, Microsoft 365 apps, mobile apps) with policies.
• Support Autopilot deployments and troubleshoot provisioning issues.
• Monitor and resolve device compliance and policy deployment issues.
• Configure and maintain Windows Defender antivirus policies, Attack Surface Reduction, and Endpoint Detection and Response.
• Support in device isolation, remediation, and threat response.
• Patch Management using Windows Update for Business.
• Maintain documentation for configurations and policies.

Skills

Intune configurations

Defender for Endpoint

Endpoint Conditional Access

Azure AD / Entra ID

Windows OS administration

Troubleshooting endpoint issues

Leadership

Tools

Intune

Defender for Endpoint

Azure Active Directory

Job description

About the role

Supports management or implementation of enterprise devices using Intune and Defender, ensuring devices are compliant, secure, and operational while assisting in troubleshooting and incident response.

Key responsibilities

• Manage and support device enrollment (Windows, iOS, Android)
• Configure and maintain configuration, compliance, and security baseline
• Support integration of Intune compliance with Conditional Access
• Deploy and manage applications (Win32, Microsoft 365 apps, mobile apps) with policies
• Support Autopilot deployments and troubleshoot provisioning issues
• Monitor and resolve device compliance and policy deployment issues
• Configure and maintain Windows Defender antivirus policies, Attack Surface Reduction, and Endpoint Detection and Response
• Support in device isolation, remediation, and threat response
• Patch Management using Windows Update for Business
• Maintain documentation for configurations and policies

About you

• Hands-on experience with Microsoft Intune's compliance, configurations, application, and update deployments
• Hands-on experience with Defender for Endpoint basic to intermediate configuration and alert handling
• Experience in creating or managing endpoint conditional access policies
• Azure AD and Entra ID concepts for endpoint
• Understanding of Windows OS administration and endpoint security fundamentals
• Ability to troubleshoot endpoint and policy-related issues
• Excellent leadership skills

About us

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.