Intune & Endpoint Management Engineer

ProV International PH

Makati

On-site

PHP 900,000 - 1,300,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

ProV International PH is seeking an experienced Endpoint Management Specialist to design, operate, and optimize Microsoft Intune-based configurations for Windows, macOS, and iOS in a global enterprise environment.

You will manage device enrollment, compliance policies, and integrations with Entra ID, Apple Business Manager, and Defender for Endpoint, while driving automation with PowerShell and Microsoft Graph; strong English communication is essential.

Qualifications

Strong hands-on experience with Microsoft Intune and enterprise endpoint management.
Strong Windows 11 engineering, administration, and troubleshooting skills.
Experience with macOS, iOS, and iPadOS with Microsoft Intune and Apple Business Manager is advantageous.
Experience with Windows Autopilot, device provisioning, deployment, configuration management, and update management is advantageous.
Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Microsoft Entra Conditional Access.
Experience with Microsoft Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management.
Proficiency in PowerShell scripting and Microsoft Graph.
Strong troubleshooting and root-cause analysis skills for complex endpoint issues.
Ability to deliver technical solutions from design through implementation and operational support.
Excellent written and spoken English.

Responsibilities

Design, operate, and continuously improve Microsoft Intune.
Manage enrollments, configuration profiles, compliance policies, application protection policies, policy assignments, and OS updates.
Manage Microsoft Entra joined, hybrid joined, and registered devices.
Configure administrative roles, scope tags, device groups, and assignment filters.
Integrate endpoints with Microsoft Entra ID, Microsoft 365, Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi.
Monitor platform health, compliance, deployments, updates, and configuration status.
Resolve platform, policy, enrollment, and deployment issues.
Assess platform changes and implement relevant capabilities.
Implement and maintain Windows Autopilot and Apple Automated Device Enrollment.
Manage Apple Business Manager integration, enrollment profiles, certificates, tokens, and application licensing.
Configure platform-specific security, authentication, networking, certificates, applications, restrictions, and user-experience settings.
Manage OS, firmware, driver, and feature updates, including deployment rings and rollback.
Define application deployment standards and packaging; coordinate apps requiring endpoint expertise.
Configure app requirements, dependencies, detection rules, assignments, installation, and removal.
Resolve deployment failures, compatibility issues, and conflicts.
Coordinate testing, rollout, supportability, lifecycle, and retirement with owners/providers.
Develop PowerShell and Microsoft Graph automation for deployment, configuration, remediation, reporting, and diagnostics.
Implement Intune Remediations, health checks, and reusable diagnostic tools.
Apply testing, version control, documentation, logging, and secure credential handling.
Ensure production automation is monitored, maintainable, and supportable.
Implement endpoint security baselines and device compliance controls.
Configure encryption, endpoint protection, firewall, ASR, app protection, and privilege management.
Implement Defender for Endpoint and Entra Conditional Access integration.
Apply least-privilege principles to endpoint administration.