Intune Rollout Engineer

Franklin Fitch; United States; On-site; USD 120,000 - 130,000; Full time

Job summary

Franklin Fitch is seeking an Intune Rollout Engineer to lead a genuine SCCM to Intune migration. You will own the build and migration, moving device management, identity, and access to Intune, Autopilot, and Entra ID across Windows, macOS, iOS, and Android.

You’ll drive cutover planning, pilot testing, and rollout, while acting as the go-to Intune expert for the team and beyond. Prior hands-on migration experience is required and MD-102/SC-300/AZ-104/MS-102 certifications are a plus.

Qualifications

• Hands-on experience migrating SCCM to Intune, not just admin tasks.
• Strong knowledge of Entra ID and Conditional Access.
• Experience supporting Azure and cloud-native identity/device strategies.
• Deep understanding of Windows 11 and modern device management.
• Certifications like MD-102, SC-300, AZ-104, MS-102 are a plus but migration experience is essential.

Responsibilities

• Lead the SCCM to Intune migration, including cutover planning, piloting, and rollout across provisioning, configuration, and app deployment on Intune and Autopilot.
• Administer Entra ID including users, groups, RBAC, MFA, SSO, and CA policies for Microsoft 365 and third-party apps.
• Define and maintain endpoint security baselines and Defender-aligned compliance; participate in audits and incident response.
• Contribute to Azure-based workplace services with focus on performance, security, and cost.
• Serve as the Intune subject-matter expert for the team during and after migration.

Skills

SCCM migration

Intune migration

Entra ID

Conditional Access

Azure

Windows 11

Intune administration

Autopilot

Tools

Microsoft 365

Azure AD

Job description

Intune Rollout Engineer | SCCM to Intune Migration | $120K–$130K

I'm working a search for an Intune Rollout Engineer to lead a genuine SCCM to Intune migration. The team doesn't have an in-house Intune expert today, and that's exactly why this role exists: they need someone who has done this transition before to come in, own it, and build out modern endpoint management from the ground up.

This isn't a maintenance seat on a stack that's already modern. It's a build and migrate role. You'll be the person who actually knows Intune in a team that currently doesn't, working across Windows, macOS, iOS, and Android to move device management, identity, and access off legacy tooling and onto Intune, Autopilot, and Entra ID.

What you'll own:

• Leading the SCCM to Intune migration itself, including planning the cutover, piloting, and rolling out device provisioning, configuration, compliance, patching, and app deployment on Intune and Autopilot.
• Entra ID administration including users, groups, RBAC, MFA, SSO, and Conditional Access policies for secure access to Microsoft 365 and third-party apps.
• Endpoint security baselines and Defender-aligned compliance work, with a seat at the table for audits, incident response, and ongoing hardening.
• Azure-based workplace services, with an eye on performance, security, and cost as you go.
• Acting as the go-to Intune expert for the wider team while the migration is underway and beyond.

What the client wants to see:

• Real hands-on experience running or heavily contributing to an SCCM to Intune migration, not just steady-state Intune administration.
• Strong working knowledge of Entra ID and Conditional Access.
• Comfort supporting Azure and cloud-native identity/device strategies.
• A deep, current understanding of Windows 11 and modern device management.
• Certifications like MD-102, SC-300, AZ-104, or MS-102 are a plus and will help you stand out, but migration experience is what actually gets you the interview.

$120,000 to $130,000 base, with room to flex depending on experience and internal equity.

If you've taken a team off SCCM and onto Intune before and want to be the person who brings that expertise into a team that doesn't have it yet, I want to hear from you. Message me or send your details and I'll share the full picture.