Intune Team Lead/SME

ASM Research, An Accenture Federal Services Company; Dover (DE); On-site; USD 99,000 - 169,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company is seeking a senior Intune/endpoint management lead to drive the design, deployment and optimization of device management strategies across Windows, iOS, Android, and macOS. You will mentor a 3+ technician team and manage large-scale migrations from SCCM to Intune in a highly regulated environment.

You will partner with security and service desk teams to enforce Zero Trust policies, while delivering advanced troubleshooting and documentation to

Qualifications

• Active DoD Secret clearance required.
• Hands-on Intune administration experience (policies, profiles, enrollment).
• Microsoft 365 Certified: Endpoint Administrator Associate or equivalent.
• DoD 8140/8570 compliance for the role (IAT/IAM).
• Experience migrating from legacy tools (SCCM) to Intune.
• Proven experience leading a team of 3+ technicians.

Responsibilities

• Advanced configuration and lifecycle management of Microsoft Intune policies across multiple platforms.
• Translate legacy configurations into modern Intune profiles during migrations.
• Design and troubleshoot Intune enrollment workflows (Windows Autopilot, Apple DEP, Android zero-touch).
• Apply Graph API scripting for automation in Intune packaging, deployment, and reporting.
• Lead root-cause analysis for enrollment failures and policy conflicts.
• Ensure Zero Trust compliance with Entra ID conditional access.
• Develop runbooks, documentation, and knowledge transfer for operations.
• Mentor and develop a team of 3+ technicians.

Skills

DoD Secret

Intune admin

Endpoint Admin

IAT/IAM compliance

Migration to Intune

Team leadership

SCCM Migration

GPO management

Education

Bachelor's degree in IT/CS or equivalent

Tools

Microsoft Intune

SCCM

Microsoft Graph API

Job description

Serves as the technical authority and lead for modern endpoint management within a highly regulated enterprise environment, driving the design, deployment, and ongoing optimization of mobile device and application management strategies using Microsoft Intune. Leads a team of 3+ endpoint management technicians, providing mentorship, performance management, and career development. Leads complex migrations from legacy client-management tools (e.g., SCCM/ConfigMgr, GPO-based management) to Microsoft Intune, translating existing configuration baselines and group policy objects into modern Intune configuration and compliance profiles. Provides advanced troubleshooting and root-cause analysis for device enrollment, policy conflict, and application deployment issues across Windows, iOS, Android, and macOS platforms managed through Intune. Partners with security, networking, and service desk teams to align Intune endpoint configurations with Zero Trust and conditional access requirements, ensuring mission-critical systems remain secure and compliant. Mentors support staff and develops technical documentation, runbooks, and standard operating procedures to sustain long-term operational readiness.

Key Responsibilities:

• Advanced configuration and lifecycle management of Microsoft Intune policies, including compliance policies, configuration profiles, and security baselines across Windows, iOS, Android, and macOS devices.
• Translates legacy client-management configuration baselines and group policy objects into modern Intune configuration and compliance profiles during large-scale migrations to Microsoft Intune.
• Designs, deploys, and troubleshoots automated enrollment workflows in Microsoft Intune, including Windows Autopilot, Apple Automated Device Enrollment, and Android zero-touch/bulk enrollment for enterprise-scale device fleets.
• Applies scripting and Microsoft Graph API-driven automation for Intune application packaging, policy deployment, reporting, and operational reconciliation tasks.
• Performs advanced root-cause analysis for Intune enrollment failures, policy conflicts, and application deployment errors; serves as the escalation point for complex endpoint incidents.
• Applies knowledge of Microsoft Entra ID conditional access, identity-based security controls, and Intune compliance policies supporting Zero Trust architecture in a highly regulated government environment.
• Develops migration runbooks, rollback procedures, technical documentation, and knowledge-transfer materials for Intune operations; mentors support staff on Intune and endpoint management best practices.
• Leads, mentors, and develops a team of 3+ technicians, including conducting performance reviews and building individual career-development plans.

Required Skills and Qualifications

• Active DoD Secret clearance required.
• Demonstrated expert hands-on experience administering Microsoft Intune, including compliance policies, configuration profiles, app deployment, and enrollment (required).
• Microsoft 365 Certified: Endpoint Administrator Associate, or comparable modern-desktop certification.
• DoD 8140 (formerly 8570) compliance at the appropriate IAT/IAM level for the role.
• Experience leading migrations from legacy client-management tools (e.g., SCCM) to Microsoft Intune.
• Demonstrated experience leading a team of 3 or more technicians, including mentoring, conducting performance reviews, and developing staff career-growth plans.

Preferred Skills and Qualifications

• Bachelor's degree in IT, Computer Science, or a related field, or equivalent relevant experience.
• 6–10 years of endpoint management, systems engineering, or enterprise mobility experience, with significant depth specifically in Microsoft Intune administration.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

$99,300 - $168,800

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, gender identity, veteran status, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, veteran status, disability, gender identity, or age. All decisions on employment are made to abide by the principle of equal employment.