Microsoft Intune Engineer

ProV International PH; Makati; Sur place; PHP 900 000 - 1 300 000; Plein temps

Résumé du poste

ProV International PH is seeking an experienced Endpoint Management Specialist to design, operate, and optimize Microsoft Intune-based configurations for Windows, macOS, and iOS in a global enterprise environment.

You will manage device enrollment, compliance policies, and integrations with Entra ID, Apple Business Manager, and Defender for Endpoint, while driving automation with PowerShell and Microsoft Graph; strong English communication is essential.

Qualifications

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management.
• Strong Windows 11 engineering, administration, and troubleshooting skills.
• Experience with macOS, iOS, and iPadOS with Microsoft Intune and Apple Business Manager is advantageous.
• Experience with Windows Autopilot, device provisioning, deployment, configuration management, and update management is advantageous.
• Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Microsoft Entra Conditional Access.
• Experience with Microsoft Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management.
• Proficiency in PowerShell scripting and Microsoft Graph.
• Strong troubleshooting and root-cause analysis skills for complex endpoint issues.
• Ability to deliver technical solutions from design through implementation and operational support.
• Excellent written and spoken English.

Responsabilités

• Design, operate, and continuously improve Microsoft Intune.
• Manage enrollments, configuration profiles, compliance policies, application protection policies, policy assignments, and OS updates.
• Manage Microsoft Entra joined, hybrid joined, and registered devices.
• Configure administrative roles, scope tags, device groups, and assignment filters.
• Integrate endpoints with Microsoft Entra ID, Microsoft 365, Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi.
• Monitor platform health, compliance, deployments, updates, and configuration status.
• Resolve platform, policy, enrollment, and deployment issues.
• Assess platform changes and implement relevant capabilities.
• Implement and maintain Windows Autopilot and Apple Automated Device Enrollment.
• Manage Apple Business Manager integration, enrollment profiles, certificates, tokens, and application licensing.
• Configure platform-specific security, authentication, networking, certificates, applications, restrictions, and user-experience settings.
• Manage OS, firmware, driver, and feature updates, including deployment rings and rollback.
• Define application deployment standards and packaging; coordinate apps requiring endpoint expertise.
• Configure app requirements, dependencies, detection rules, assignments, installation, and removal.
• Resolve deployment failures, compatibility issues, and conflicts.
• Coordinate testing, rollout, supportability, lifecycle, and retirement with owners/providers.
• Develop PowerShell and Microsoft Graph automation for deployment, configuration, remediation, reporting, and diagnostics.
• Implement Intune Remediations, health checks, and reusable diagnostic tools.
• Apply testing, version control, documentation, logging, and secure credential handling.
• Ensure production automation is monitored, maintainable, and supportable.
• Implement endpoint security baselines and device compliance controls.
• Configure encryption, endpoint protection, firewall, ASR, app protection, and privilege management.
• Implement Defender for Endpoint and Entra Conditional Access integration.
• Apply least-privilege principles to endpoint administration.

Connaissances

Microsoft Intune

Windows 11

macOS/iOS

Windows Autopilot

Microsoft Entra ID

Defender for Endpoint

BitLocker

PowerShell

Microsoft Graph

Troubleshooting

ITIL

English

Outils

Git

Azure Automation

Power Automate

Windows Autopatch

Endpoint Analytics

Remote Help

PKI

Description du poste

• Design, operate, and continuously improve Microsoft Intune
• Manage device enrollment, configuration profiles, compliance policies, application protection policies, policy assignments, and operating system updates
• Manage Microsoft Entra joined, Microsoft Entra hybrid joined, and registered devices
• Configure administrative roles, scope tags, device groups, and assignment filters
• Integrate endpoints with Microsoft Entra ID, Microsoft 365, Microsoft Defender for Endpoint, Apple Business Manager, PKI, VPN, and Wi-Fi
• Monitor platform health, compliance, deployments, updates, and configuration status
• Resolve platform, policy, enrollment, and deployment issues
• Assess platform changes and implement relevant capabilities

Windows and Apple Endpoint Management

• Implement and maintain approved configurations mainly for Windows 11, macOS and iOS is nice to have;
• Design and operate Windows Autopilot and Apple Automated Device Enrollment
• Manage Apple Business Manager integration, enrollment profiles, certificates, tokens, and application licensing
• Configure platform-specific security, authentication, networking, certificates, applications, restrictions, and user-experience settings
• Manage operating system, firmware, driver, and feature updates, including deployment rings and rollback

Application Management and Automation

• Define application deployment standards and package or coordinate applications requiring endpoint expertise
• Configure application requirements, dependencies, detection rules, assignments, installation, and removal
• Resolve deployment failures, compatibility issues, and application conflicts
• Coordinate application testing, rollout, supportability, lifecycle, and retirement with application owners or service providers
• Develop PowerShell and Microsoft Graph automation for deployment, configuration, remediation, reporting, and diagnostics
• Implement Microsoft Intune Remediations, health checks, and reusable diagnostic tools
• Apply testing, version control, documentation, logging, and secure credential handling
• Ensure production automation is monitored, maintainable, and supportable

Endpoint Security and Access (nice to have)

• Implement and maintain endpoint security baselines and device compliance controls
• Configure encryption, endpoint protection, firewall, attack surface reduction, application protection, and privilege management
• Implement Microsoft Defender for Endpoint and Microsoft Entra Conditional Access integration
• Apply least-privilege principles to endpoint administration and local administrator access

Endpoint Support and Service Desk Enablement

• Resolve complex endpoint incidents, perform root cause analysis, and implement permanent fixes or automation.
• Coordinate issue resolution across Service Desk, IT teams, application owners, and external providers.
• Enable Service Desk and local IT through procedures, knowledge articles, training, and technical guidance.
• Review escalations, close operational gaps, and ensure endpoint services remain supportable and business-critical issues are effectively managed.

Device Standards and Architecture

• Translate approved standards into Microsoft Intune configurations
• Maintain the endpoint architecture and key technical documentation
• Evaluate technical deviations and provide recommendations
• Align device standards and configuration baselines with relevant global and local stakeholders

Required Skills and Experience

• Strong hands-on experience with Microsoft Intune and enterprise endpoint management
• Strong Windows 11 engineering, administration, and troubleshooting skills
• Experience managing macOS, iOS, and iPadOS with Microsoft Intune and Apple Business Manager will be considered an advantage
• Experience with Windows Autopilot, device provisioning, application deployment, configuration management, and update management will be considered an advantage
• Strong knowledge of Microsoft Entra ID device integration, authentication, device compliance, and Microsoft Entra Conditional Access
• Experience with Microsoft Defender for Endpoint, BitLocker, Windows Firewall, security baselines, attack surface reduction, and privilege management
• Practical experience with enterprise application packaging and controlled deployment processes
• Strong PowerShell scripting skills and practical experience with Microsoft Graph
• Strong troubleshooting and root-cause analysis skills for complex endpoint issues
• Experience defining device standards, configuration baselines, testing, rollout, and rollback processes will be considered an advantage
• Ability to enable the Service Desk and local IT through technical procedures, training, diagnostics, and support tools
• Good understanding of ITIL-aligned incident, problem, change, configuration, and knowledge-management processes
• Ability to deliver technical solutions independently from design through implementation and operational support
• Strong communication skills and the ability to influence technical decisions in an international organization
• Professional written and spoken English

Additional Qualifications and Competencies

• Relevant Microsoft or Apple certifications are desirable
• Experience with PKI, certificate-based authentication, Microsoft Cloud PKI, SCEP, NDES, VPN, or Wi-Fi is desirable
• Experience with Git, Azure Automation, Power Automate, Windows Autopatch, Endpoint Analytics, Remote Help, or comparable technologies is desirable
• Experience with endpoint asset management, hardware lifecycle, managed service providers, or multinational and regulated environments is desirable
• Self-driven, structured, and accountable, with strong analytical and problem-solving skills
• Hands-on and focused on secure, stable, standardized, and supportable solutions
• Strong communicator who can explain technical topics clearly, build consensus, and influence decisions without formal authority
• Calm and systematic during major incidents and complex troubleshooting
• Collaborative, pragmatic, and committed to knowledge sharing and continuous technical development