Intune Architect EDV WERKE AG Building on experience, results and commitment.

Edv Werke Ag; Union (NJ); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive salary with bonuses

Professional development opportunities

Dynamic and collaborative environment

Job summary

EDV Werke is seeking an Intune Architect to design and implement enterprise Windows policies in Intune, migrate GPO settings, and deploy Autopilot with Hybrid Join.

You will ensure security baselines, compliance, and co-management transitions, while producing thorough documentation and handover materials for operations teams.

Qualifications

• 8+ years in Windows endpoint engineering with solid Intune hands-on experience.
• Designed and delivered Intune configurations for large-device deployments.
• Producing Autopilot, Hybrid Join, and Enrolment Status Page configurations.

Responsibilities

• Design and configure standard Windows policies in Intune aligned with CIS benchmarks.
• Migrate GPO settings to Intune, one-to-one, function by function.
• Implement and test Autopilot with Hybrid Entra ID Join and Enrollment Status Page.
• Configure Windows Hello for Business, BitLocker, Entra LAPS, Defender for Endpoint, and CA in hybrid environments.
• Configure compliance policies, update rings, and conditional access in Intune.
• Support migration from GPO/SCCM to Intune with workload transitions and rollback.
• Test endpoints, troubleshoot deployments, and validate security and ops readiness.
• Create build docs, runbooks, and hand over platforms to operations teams.

Skills

Endpoint Engineering

Intune Delivery

Autopilot & Hybrid Join

Security Baselines

GPO Migration

SCCM Co-Management

Endpoint Security

Documentation & Handover

Job description

EDV Werke is looking for a Intune Architect.

Working Model: European Union

Location: Remote

Form of cooperation: B2B Contract

Tasks:

• Policy Architecture – Design and configure standard Windows policies in Intune Settings Catalog aligned with CIS security benchmarks
• GPO Migration – Analyze existing Group Policy Objects and rebuild required settings in Intune, function by function
• Autopilot Deployment – Implement and test Windows Autopilot with Hybrid Entra ID Join and Enrollment Status Page configuration
• Security Configuration – Configure Windows Hello for Business, BitLocker, Entra LAPS, Defender for Endpoint, and certificate integration
• Compliance & Updates – Configure compliance policies, update rings, Conditional Access, and scoped Intune administration
• Co-Management Transition – Support migration from GPO and SCCM to Intune, including workload transitions, testing, and rollback
• Platform Validation – Test endpoint configurations, troubleshoot deployment issues, and validate security and operational readiness
• Documentation & Handover – Produce technical documentation, operational SOPs, and runbooks for handover to operations teams

Must-Have Skills:

• Endpoint Engineering Experience – At least 8 years in Windows endpoint engineering, including 5 or more years of hands‑on Intune experience
• Enterprise Intune Delivery – Personally designed and implemented Intune configuration for 10,000+ Windows devices and delivered production rollout
• Autopilot & Hybrid Join – Production experience with Autopilot, Hybrid Entra ID Join, Intune Connector for Active Directory, and Enrollment Status Page
• Security Baselines – Experience implementing CIS or Microsoft security baselines through Settings Catalog with deviation management
• GPO Migration – Proven ability to analyze existing GPOs and migrate settings to Intune individually rather than through direct import
• SCCM Co-Management – Experience managing SCCM co-management transitions, understanding workload cutovers, and troubleshooting issues
• Endpoint Security – Hands‑on knowledge of PKCS certificates, Windows Hello for Business, LAPS, Defender for Endpoint, and Conditional Access in hybrid environments
• Documentation & Handover – Experience creating build documentation and operational runbooks and handing over delivered platforms to operational teams

Benefits:

• Competitive salary with performance-based bonuses.
• Opportunities for professional development and advancement.
• Dynamic and collaborative work environment.