Intune Architect

AXA Professionals; Salem (NH); On-site; USD 130,000 - 190,000; Full time

Job summary

AXA Professionals seeks a mid-to-senior Intune architect/consultant to design and implement modern endpoint management using Microsoft Intune across Windows, macOS, iOS and Android. You will drive zero-trust, governance, and automation while coordinating with security and IT leadership.

The role emphasizes hands-on Intune expertise, complex migration projects, and customer-facing technical leadership across enterprise environments. Hybrid work and enterprise-scale engagements are expected.

Qualifications

• Intune SME-level expertise with hands-on, production-scale experience.
• Deep familiarity with Entra ID, Autopilot, CA, and Defender for Endpoint.
• Strong Windows/macOS/iOS/Android device management knowledge.
• Experience with automation via PowerShell and Graph API.
• Background in endpoint security, identity management, and Zero Trust.
• Experience migrating from SCCM or other MDM/UEM platforms.

Responsibilities

• Design enterprise Intune architectures for multiple platforms.
• Lead Autopilot deployment and zero-trust policy implementation.
• Build automation and runbooks; provide Tier 3 escalation support.
• Oversee migration from legacy tools to Intune and co-management approaches.
• Serve as technical authority for design decisions and customer engagements.

Skills

Intune SME

Intune architecture

PowerShell

Graph API

Zero Trust

SCCM migration

Tools

SCCM

Jamf

Workspace ONE

Autopilot

Defender for Endpoint

Job description

Mid-Level: $130,000-$150,000 | Architect: $160,000-$190,000

Summary

This role is responsible for designing, implementing, and optimizing Microsoft Intune and related Modern Endpoint Management solutions across customer organizations. This person partners with IT leadership, security teams, and end-user computing teams to drive secure, scalable, and automated device management aligned with Zero Trust principles, leading assessments, architecture, deployment, migration, and operational readiness activities.

Deep, hands-on Microsoft Intune subject-matter expertise (SME-level) is a MUST for this role at every level - this is not a generalist endpoint position.

Hiring for this function at two levels. Candidates are leveled based on depth of Intune architecture experience, scope of ownership, and enterprise scale.

Intune Consultant - Mid-Level ($130,000-$150,000)

• • Configures and administers Intune enrollment, compliance, and configuration profiles under architectural direction.
• • Executes Autopilot deployment, app packaging, and Conditional Access build-out.
• • Builds automation scripts (PowerShell/Graph API) for day-to-day operations.
• • Provides Tier 2/3 troubleshooting and hands-on migration execution.
• • Owns end-to-end enterprise Intune architecture and modernization roadmap across Windows, macOS, iOS/iPadOS, and Android.
• • Defines Zero Trust, compliance, and governance frameworks; sets standards the consultant team implements to.
• • Leads complex SCCM/JAMF/Workspace ONE migration strategy and co-management design.
• • Serves as the customer-facing technical authority and final escalation point for design decisions.

Key Responsibilities

Strategy & Architecture

• • Develop enterprise-grade Intune architectures covering Windows, macOS, iOS/iPadOS, and Android.
• • Assess current endpoint management maturity and define modernization roadmaps.
• • Design policies aligned with Zero Trust, least privilege, and compliance frameworks.
• • Integrate Intune with the Microsoft 365 security stack (Entra ID, Defender, Purview, Autopatch, Autopilot).

Implementation & Configuration

• • Configure Intune device enrollment, compliance policies, configuration profiles, and application deployment.
• • Lead Autopilot deployment strategy, including hardware hash import, ESP configuration, and white-glove workflows.
• • Implement Conditional Access policies and device compliance integrations.
• • Package and deploy Win32, LOB, and Store apps using modern deployment techniques.
• • Configure and optimize Windows Update for Business and Autopatch.

Migration & Modernization

• • Lead migrations from legacy tools (SCCM/ConfigMgr, JAMF, Workspace ONE, etc.) to Intune.
• • Develop co-management or tenant-attach strategies where applicable.
• • Build automation using PowerShell, Graph API, and proactive remediation scripts.

Security & Compliance

• • Implement device compliance, endpoint hardening, and security baselines.
• • Integrate Defender for Endpoint and ensure secure posture across all device platforms.
• • Support audit, reporting, and regulatory compliance requirements.

Operations & Enablement

• • Create operational runbooks, governance models, and best-practice documentation.
• • Train IT teams on Intune administration, troubleshooting, and lifecycle management.
• • Provide Tier 3 escalation support for complex endpoint issues.

Requirements / Required Skills & Abilities

• • Intune SME-level expertise required - deep, hands-on, production-scale experience with Microsoft Intune is a must-have, not a nice-to-have.
• • Deep expertise with Microsoft Intune, Entra ID, Autopilot, Conditional Access, and Defender for Endpoint.
• • Strong understanding of Windows 10/11, macOS, iOS/iPadOS, and Android management.
• • Experience with PowerShell, Graph API, and automation frameworks.
• • Background in endpoint security, identity management, and Zero Trust architecture.
• • Experience migrating from SCCM or other MDM/UEM platforms.
• • Strong consulting skills: requirements gathering, documentation, stakeholder communication.

Preferred Qualifications

• • Microsoft certifications such as MD-102 (Endpoint Administrator), SC-300 (Identity & Access Administrator), AZ-104 (Azure Administrator), MS-102 (Microsoft 365 Administrator).
• • Experience in enterprise environments (5,000+ endpoints).
• • Familiarity with compliance frameworks (NIST, CIS, ISO 27001).

Success Indicators

• • Reduction in manual endpoint management tasks through automation.
• • Improved device compliance and security posture.
• • Successful rollout of Autopilot and modern provisioning workflows.
• • Clear operational documentation and knowledge transfer to internal teams.
• • High end-user satisfaction with device onboarding and performance.