L3 Endpoint Intune Engineer

ProV International PH; Makati; On-site; PHP 900,000 - 1,100,000; Full time

Job summary

ProV International PH seeks an experienced Endpoint Management Engineer to design, operate, and continuously improve Microsoft Intune-based solutions for Windows, macOS, and iOS. You will manage enrollment, policies, and updates, integrate Entra ID, Defender for Endpoint, and Apple Business Manager, and collaborate with global teams.

Ideal candidates have hands-on Intune experience, Windows Autopilot, PowerShell scripting, and strong ITIL-aligned incident handling.

Qualifications

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management.
• Windows 11 engineering, administration, and troubleshooting skills.
• Experience managing macOS, iOS, and iPadOS with Intune and Apple Business Manager is advantageous.
• Experience with Windows Autopilot, device provisioning, application deployment, configuration management, and update management is advantageous.
• Knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Conditional Access.
• Experience with Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management.
• Enterprise application packaging and controlled deployment processes.
• PowerShell scripting and Microsoft Graph experience.
• Troubleshooting and root-cause analysis for complex endpoint issues.
• Ability to enable Service Desk and local IT with procedures, training, diagnostics, and tools.
• ITIL-aligned incident, problem, change, configuration, and knowledge management understanding.
• Ability to deliver technical solutions from design through implementation and operation.
• Strong communication and ability to influence decisions in an international organization.
• Professional written and spoken English.

Responsibilities

• Design, operate, and continuously improve Microsoft Intune configurations.
• Manage enrollment, policies, and OS updates; monitor platform health and deployments.
• Integrate Entra ID, Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi.
• Resolve platform and deployment issues; implement platform changes.
• Define app deployment standards; manage dependencies and installation rules.
• Develop PowerShell and Graph automation for deployment, remediation, and diagnostics.
• Ensure testing, version control, and secure credential handling.
• Maintain production automation that is monitorable and supportable.

Skills

Microsoft Intune

Enterprise endpoint management

Windows 11 engineering

macOS and iOS management with Intune

Windows Autopilot

Device provisioning

Application deployment

Configuration management

Microsoft Entra ID integration

Authentication & device compliance

Microsoft Entra Conditional Access

Microsoft Defender for Endpoint

BitLocker & Windows Firewall

Security baselines & attack surface

PowerShell scripting

Microsoft Graph

Troubleshooting & root-cause analysis

ITIL processes

Technical documentation & training

English communication

Technical influence without authority

Tools

Git

Azure Automation

Power Automate

Windows Autopatch

Endpoint Analytics

Remote Help

Job description

• Design, operate, and continuously improve Microsoft Intune
• Manage device enrollment, configuration profiles, compliance policies, application protection policies, policy assignments, and operating system updates
• Manage Microsoft Entra joined, Microsoft Entra hybrid joined, and registered devices
• Configure administrative roles, scope tags, device groups, and assignment filters
• Integrate endpoints with Microsoft Entra ID, Microsoft 365, Microsoft Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi
• Monitor platform health, compliance, deployments, updates, and configuration status
• Resolve platform, policy, enrollment, and deployment issues
• Assess platform changes and implement relevant capabilities

Windows and Apple Endpoint Management

• Implement and maintain approved configurations mainly for Windows 11, macOS and iOS is nice to have;
• Design and operate Windows Autopilot and Apple Automated Device Enrollment
• Manage Apple Business Manager integration, enrollment profiles, certificates, tokens, and application licensing
• Configure platform-specific security, authentication, networking, certificates, applications, restrictions, and user-experience settings
• Manage operating system, firmware, driver, and feature updates, including deployment rings and rollback

Application Management and Automation

• Define application deployment standards and package or coordinate applications requiring endpoint expertise
• Configure application requirements, dependencies, detection rules, assignments, installation, and removal
• Resolve deployment failures, compatibility issues, and application conflicts
• Coordinate application testing, rollout, supportability, lifecycle, and retirement with application owners or service providers
• Develop PowerShell and Microsoft Graph automation for deployment, configuration, remediation, reporting, and diagnostics
• Implement Microsoft Intune Remediations, health checks, and reusable diagnostic tools
• Apply testing, version control, documentation, logging, and secure credential handling
• Ensure production automation is monitored, maintainable, and supportable

Endpoint Security and Access (nice to have)

• Implement and maintain endpoint security baselines and device compliance controls
• Configure encryption, endpoint protection, firewall, attack surface reduction, application protection, and privilege management
• Implement Microsoft Defender for Endpoint and Microsoft Entra Conditional Access integration
• Apply least-privilege principles to endpoint administration and local administrator access

Endpoint Support and Service Desk Enablement

• Resolve complex endpoint incidents, perform root cause analysis, and implement permanent fixes or automation.
• Coordinate issue resolution across Service Desk, IT teams, application owners, and external providers.
• Enable Service Desk and local IT through procedures, knowledge articles, training, and technical guidance.
• Review escalations, close operational gaps, and ensure endpoint services remain supportable and business-critical issues are effectively managed.

Device Standards and Architecture

• Translate approved standards into Microsoft Intune configurations
• Maintain the endpoint architecture and key technical documentation
• Evaluate technical deviations and provide recommendations
• Align device standards and configuration baselines with relevant global and local stakeholders

Required Skills and Experience

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management
• Strong Windows 11 engineering, administration, and troubleshooting skills
• Experience managing macOS, iOS, and iPadOS with Microsoft Intune and Apple Business Manager will be considered an advantage
• Experience with Windows Autopilot, device provisioning, application deployment, configuration management, and update management will be considered an advantage
• Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Microsoft Entra Conditional Access
• Experience with Microsoft Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management
• Practical experience with enterprise application packaging and controlled deployment processes
• Strong PowerShell scripting skills and practical experience with Microsoft Graph
• Strong troubleshooting and root-cause analysis skills for complex endpoint issues
• Experience defining device standards, configuration baselines, testing, rollout, and rollback processes will be considered an advantage
• Ability to enable the Service Desk and local IT through technical procedures, training, diagnostics, and support tools
• Good understanding of ITIL-aligned incident, problem, change, configuration, and knowledge-management processes
• Ability to deliver technical solutions independently from design through implementation and operational support
• Strong communication skills and the ability to influence technical decisions in an international organization
• Professional written and spoken English

Additional Qualifications and Competencies

• Relevant Microsoft or Apple certifications are desirable
• Experience with PKI, certificate-based authentication, Microsoft Cloud PKI, SCEP, NDES, VPN, or Wi-Fi is desirable
• Experience with Git, Azure Automation, Power Automate, Windows Autopatch, Endpoint Analytics, Remote Help, or comparable technologies is desirable
• Experience with endpoint asset management, hardware lifecycle, managed service providers, or multinational and regulated environments is desirable
• Self-driven, structured, and accountable, with strong analytical and problem-solving skills
• Hands-on and focused on secure, stable, standardized, and supportable solutions
• Strong communicator who can explain technical topics clearly, build consensus, and influence decisions without formal authority
• Calm and systematic during major incidents and complex troubleshooting
• Collaborative, pragmatic, and committed to knowledge sharing and continuous technical development