L3 Endpoint Intune Engineer

ProV International PH; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

ProV International Philippines seeks a skilled Endpoint Engineering and Operations specialist to design and operate Microsoft Intune, manage device enrollment, configurations, and compliance policies. You will integrate Entra ID, Defender for Endpoint, and Apple Business Manager while maintaining security and smooth deployments.

You will implement Autopilot, Intune remediations, and automation through PowerShell and Graph, ensuring health checks and incident response are tightly managed in a

Qualifications

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management.
• Strong Windows 11 engineering, administration, and troubleshooting skills.
• Experience with Windows Autopilot, device provisioning, app deployment, and update management is advantageous.
• Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Conditional Access.
• PowerShell scripting skills and practical experience with Microsoft Graph.

Responsibilities

• Design, operate, and continuously improve Microsoft Intune and endpoint management processes.
• Manage enrollment, configurations, compliance, and policy deployment across devices.
• Integrate endpoints with Microsoft Entra ID, M365, Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi‑Fi.
• Monitor platform health, deployments, updates, and configuration status; resolve issues.
• Develop automation with PowerShell and Graph for deployment, remediation, and diagnostics.

Skills

Microsoft Intune

Windows 11

Azure Active Directory / Entra

Microsoft Defender for Endpoint

PowerShell

Tools

Microsoft Graph

Apple Business Manager

Job description

Key Responsibilities

Endpoint Engineering and Operations

• Design, operate, and continuously improve Microsoft Intune
• Manage device enrollment, configuration profiles, compliance policies, application protection policies, policy assignments, and operating system updates
• Manage Microsoft Entra joined, Microsoft Entra hybrid joined, and registered devices
• Configure administrative roles, scope tags, device groups, and assignment filters
• Integrate endpoints with Microsoft Entra ID, Microsoft 365, Microsoft Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi
• Monitor platform health, compliance, deployments, updates, and configuration status
• Resolve platform, policy, enrollment, and deployment issues
• Assess platform changes and implement relevant capabilities

Windows and Apple Endpoint Management

• Implement and maintain approved configurations mainly for Windows 11, macOS and iOS is nice to have;
• Design and operate Windows Autopilot and Apple Automated Device Enrollment
• Manage Apple Business Manager integration, enrollment profiles, certificates, tokens, and application licensing
• Configure platform-specific security, authentication, networking, certificates, applications, restrictions, and user-experience settings
• Manage operating system, firmware, driver, and feature updates, including deployment rings and rollback

Application Management and Automation

• Define application deployment standards and package or coordinate applications requiring endpoint expertise
• Configure application requirements, dependencies, detection rules, assignments, installation, and removal
• Resolve deployment failures, compatibility issues, and application conflicts
• Coordinate application testing, rollout, supportability, lifecycle, and retirement with application owners or service providers
• Develop PowerShell and Microsoft Graph automation for deployment, configuration, remediation, reporting, and diagnostics
• Implement Microsoft Intune Remediations, health checks, and reusable diagnostic tools
• Apply testing, version control, documentation, logging, and secure credential handling
• Ensure production automation is monitored, maintainable, and supportable

Endpoint Security and Access (nice to have)

• Implement and maintain endpoint security baselines and device compliance controls
• Configure encryption, endpoint protection, firewall, attack surface reduction, application protection, and privilege management
• Implement Microsoft Defender for Endpoint and Microsoft Entra Conditional Access integration
• Apply least-privilege principles to endpoint administration and local administrator access

Endpoint Support and Service Desk Enablement

• Resolve complex endpoint incidents, perform root cause analysis, and implement permanent fixes or automation.
• Coordinate issue resolution across Service Desk, IT teams, application owners, and external providers.
• Enable Service Desk and local IT through procedures, knowledge articles, training, and technical guidance.
• Review escalations, close operational gaps, and ensure endpoint services remain supportable and business-critical issues are effectively managed.

Device Standards and Architecture

• Translate approved standards into Microsoft Intune configurations
• Maintain the endpoint architecture and key technical documentation
• Evaluate technical deviations and provide recommendations
• Align device standards and configuration baselines with relevant global and local stakeholders

Required Skills and Experience

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management
• Strong Windows 11 engineering, administration, and troubleshooting skills
• Experience managing macOS, iOS, and iPadOS with Microsoft Intune and Apple Business Manager will be considered an advantage
• Experience with Windows Autopilot, device provisioning, application deployment, configuration management, and update management will be considered an advantage
• Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Microsoft Entra Conditional Access
• Experience with Microsoft Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management
• Practical experience with enterprise application packaging and controlled deployment processes
• Strong PowerShell scripting skills and practical experience with Microsoft Graph
• Strong troubleshooting and root-cause analysis skills for complex endpoint issues
• Experience defining device standards, configuration baselines, testing, rollout, and rollback processes will be considered an advantage
• Ability to enable the Service Desk and local IT through technical procedures, training, diagnostics, and support tools
• Good understanding of ITIL-aligned incident, problem, change, configuration, and knowledge-management processes
• Ability to deliver technical solutions independently from design through implementation and operational support
• Strong communication skills and the ability to influence technical decisions in an international organization
• Professional written and spoken English

Additional Qualifications and Competencies

• Relevant Microsoft or Apple certifications are desirable
• Experience with PKI, certificate-based authentication, Microsoft Cloud PKI, SCEP, NDES, VPN, or Wi-Fi is desirable
• Experience with Git, Azure Automation, Power Automate, Windows Autopatch, Endpoint Analytics, Remote Help, or comparable technologies is desirable
• Experience with endpoint asset management, hardware lifecycle, managed service providers, or multinational and regulated environments is desirable
• Self-driven, structured, and accountable, with strong analytical and problem-solving skills
• Hands-on and focused on secure, stable, standardized, and supportable solutions
• Strong communicator who can explain technical topics clearly, build consensus, and influence decisions without formal authority
• Calm and systematic during major incidents and complex troubleshooting
• Collaborative, pragmatic, and committed to knowledge sharing and continuous technical development