Senior Endpoint Engineer - Intune

Altera; San Jose (CA); On-site; USD 133,000 - 193,000; Full time

Job summary

Altera is seeking an Endpoint Engineer specializing in Microsoft Intune to design and manage the company’s modern device management platform for a global workforce across Windows, macOS, iOS, and Android.

This role focuses on policy design, Autopilot enrollment, compliance controls, app deployment, and integration with Azure AD and Defender, with emphasis on CIS/NIST-aligned security baselines and maintainable runbooks.

Qualifications

• Hands-on experience with Microsoft Intune including device enrollment, policy management, and app deployment.
• Proficiency with Windows Autopilot for modern device provisioning.
• Deep knowledge of Windows 11 configuration, group policy migration, and endpoint hardening.
• Experience with Azure AD, Conditional Access, and hybrid join scenarios.
• Scripting proficiency in PowerShell for endpoint automation.

Responsibilities

• Design, deploy, and manage Microsoft Intune policies for Windows, macOS, iOS, and Android endpoints.
• Implement Windows Autopilot for zero-touch device provisioning and enrollment workflows.
• Develop compliance policies, conditional access controls, and device configuration profiles.
• Manage application deployment, patching, and software lifecycle through Intune and packaging tools.
• Integrate Intune with Azure AD, Defender for Endpoint, and enterprise security platforms.
• Develop and maintain endpoint security baselines aligned to CIS or NIST standards.
• Troubleshoot endpoint enrollment, policy conflicts, compliance failures, and application deployment issues.
• Maintain Intune documentation, reporting dashboards, and operational runbooks.

Skills

Microsoft Intune

Windows Autopilot

Azure AD

PowerShell

Endpoint security

Policy management

Education

Bachelor’s degree in Information Technology or Computer Science

Tools

Jamf

MSIX

Win32 apps

Winget repository

Job description

Job Description:

Altera is seeking an Endpoint Engineer specializing in Microsoft Intune to design and manage the company’s modern device management platform. This role ensures secure, compliant, and efficiently managed endpoints across the semiconductor company’s global workforce, including Windows, macOS, iOS, and Android devices.

Key Responsibilities

• Design, deploy, and manage Microsoft Intune policies for Windows, macOS, iOS, and Android endpoints.
• Implement Windows Autopilot for zero-touch device provisioning and enrollment workflows.
• Develop compliance policies, conditional access controls, and device configuration profiles.
• Manage application deployment, patching, and software lifecycle through Intune and packaging tools.
• Integrate Intune with Azure AD, Defender for Endpoint, and enterprise security platforms.
• Develop and maintain endpoint security baselines aligned to CIS or NIST standards.
• Troubleshoot endpoint enrollment, policy conflicts, compliance failures, and application deployment issues.
• Maintain Intune documentation, reporting dashboards, and operational runbooks.

The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.

$133.2K - $192.8K USD

We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.

Qualifications:

Required Skills

• Strong hands-on experience with Microsoft Intune including device enrollment, policy management, and app deployment.
• Proficiency with Windows Autopilot for modern device provisioning.
• Deep knowledge of Windows 11 configuration, group policy migration, and endpoint hardening.
• Experience with Azure AD, Conditional Access, and hybrid join scenarios.
• Familiarity with Microsoft Defender for Endpoint integration and endpoint security controls.
• Scripting proficiency in PowerShell for endpoint automation.

Preferred Skills

• Experience managing macOS endpoints in Intune or Jamf environments.
• Knowledge of software packaging (MSIX, Win32 apps) and Winget repository management.
• Experience with patch management tools and vulnerability remediation workflows.
• Microsoft Certified: Modern Desktop Administrator Associate or equivalent.
• Bachelor’s Degree in Information Technology, Computer Science, or a related field.

Job Type:

Regular

Shift:

Shift 1 (United States of America)

Primary Location:

San Jose, California, United States

Posting Statement:

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.