Senior Privileged Identity & Endpoint Security Lead (Intune)

EY GDS; Taguig; On-site; PHP 1,004,000 - 1,674,000; Full time

Job summary

EY GDS in Manila is seeking an IT professional to manage enterprise devices using Microsoft Intune and Defender for Endpoint, ensuring devices remain compliant, secure, and operational while assisting in troubleshooting and incident response.

You will configure baselines, support Autopilot deployments, integrate Intune with Conditional Access, deploy applications, patch management, and maintain clear documentation.

Qualifications

• Hands-on experience with Microsoft Intune’s compliance, configurations, application, and update deployments.
• Hands-on experience with Defender for Endpoint basic to intermediate configuration and alert handling.
• Experience in creating or managing endpoint conditional access policies.
• Azure AD and Entra ID concepts for endpoint security.
• Understanding of Windows OS administration and endpoint security fundamentals.
• Ability to troubleshoot endpoint and policy-related issues.
• Excellent leadership skills.

Responsibilities

• Manage and support device enrollment (Windows, iOS, Android).
• Configure and maintain configuration, compliance, and security baseline.
• Support integration of Intune compliance with Conditional Access.
• Deploy and manage applications (Win32, Microsoft 365 apps, mobile apps) with policies.
• Support Autopilot deployments and troubleshoot provisioning issues.
• Monitor and resolve device compliance and policy deployment issues.
• Configure and maintain Windows Defender antivirus policies, Attack Surface Reduction, and Endpoint Detection and Response.
• Support in device isolation, remediation, and threat response.
• Patch Management using Windows Update for Business.
• Maintain documentation for configurations and policies.

Skills

Intune configurations

Defender for Endpoint

Endpoint Conditional Access

Azure AD / Entra ID

Windows OS administration

Troubleshooting endpoint issues

Leadership

Tools

Intune

Defender for Endpoint

Azure Active Directory

Job description

EY GDS in Manila is seeking an IT professional to manage enterprise devices using Microsoft Intune and Defender for Endpoint, ensuring devices remain compliant, secure, and operational while assisting in troubleshooting and incident response.

You will configure baselines, support Autopilot deployments, integrate Intune with Conditional Access, deploy applications, patch management, and maintain clear documentation.