Consultant / Freelancer

ARISE TECHGLOBAL PRIVATE LIMITED; United States; Remote; USD 83,000 - 165,000; Full time

Benefits offered by this job

Remote

Scouting for Consultant / Freelancer

Job summary

ARISE TECHGLOBAL PRIVATE LIMITED is seeking an experienced Endpoint Management Lead to migrate SCCM workloads to Microsoft Intune and design hybrid co-management architectures. The role focuses on Autopilot deployments, patch management, and enforcing Zero Trust security across devices.

The ideal candidate will have extensive PowerShell scripting skills, strong troubleshooting abilities, and experience coordinating with security teams to maintain compliance and device health in a modern

Qualifications

• 8+ years enterprise endpoint management experience.
• 5+ years hands-on SCCM (ConfigMgr) administration.
• 35+ years hands-on Microsoft Intune experience.

Responsibilities

• Design Intune architecture (Cloud-only / Hybrid / Co-Management) and migrate workloads.
• Implement Autopatch deployment rings (Test, Pilot, Broad, Critical) and manage patching cadence.
• Configure device enrollment, lifecycle workflows, and Autopilot profiles.
• Integrate Intune with Azure AD / Entra ID and Conditional Access; ensure compliance and security baselines.
• Automate endpoint workflows using PowerShell and monitor device health and update compliance.

Skills

Endpoint management

SCCM (ConfigMgr)

Microsoft Intune

Intune Autopatch

Windows Autopilot

Azure AD / Entra ID

PowerShell scripting

Co-management & migrations

Tools

SCCM ConfigMgr

Intune

Azure AD

Job description

Role & responsibilities

Core Responsibilities

• Endpoint Management & Migration (SCCM Intune)
• Lead assessment and migration of SCCM workloads to Microsoft Intune
• Design Intune architecture (Cloud-only / Hybrid / Co-Management)
• Migrate collections, applications, baselines, and policies
• Configure compliance, configuration profiles, and security baselines
• Manage Win32 application packaging and deployment
• Integrate Intune with Azure AD / Entra ID and Conditional Access
• Automate endpoint workflows using PowerShell
• Patch & Update Management (SCCM Intune Autopatch)
• Transition OS and application patching from SCCM/WSUS to Intune Autopatch
• Design and manage Autopatch deployment rings (Test, Pilot, Broad, Critical)
• Manage Windows Feature Updates and Quality Updates
• Monitor update compliance and device health
• Troubleshoot update failures and remediation workflows
• Generate patch compliance, audit, and security reports
• Coordinate patching cadence with security and business teams
• Device Provisioning & Imaging (SCCM Autopilot)
• Replace SCCM imaging/task sequences with Windows Autopilot
• Design and deploy Autopilot profiles (User-Driven & Pre-Provisioned)
• Configure device enrollment and lifecycle workflows
• Integrate Autopilot with Intune apps, policies, and security controls
• Manage OEM/reseller Autopilot registrations
• Optimize zero-touch provisioning and end-user experience
• Troubleshoot enrollment and provisioning issues
• Security & Governance
• Enforce Zero Trust and Modern Workplace security principles
• Integrate Intune with Defender for Endpoint
• Support compliance requirements (HIPAA, SOX, CMMC, ISO, SOC2)
• Maintain documentation, standards, and operational runbooks
• Support audits and security assessments

Required Skills & Experience

• 8+ years enterprise endpoint management experience
• 5+ years hands-on SCCM (ConfigMgr) administration
• 35+ years hands-on Microsoft Intune experience

Strong expertise in:

• Intune Autopatch
• Windows Autopilot
• Azure AD / Entra ID
• Windows 10/11 management
• Advanced PowerShell scripting
• Experience with co-management and phased migrations
• Strong troubleshooting and root-cause analysis skills

Perks and benefits

• Scouting for Consultant / Freelancer
• Max Budget of 18LPA
• Remote
• Need to work on 6PM-3AM