Senior Endpoint Engineer - Intune & Autopilot Expert

Altera; San Jose (CA); On-site; USD 133,000 - 193,000; Full time

Job summary

Altera is seeking an Endpoint Engineer specializing in Microsoft Intune to design and manage the company’s modern device management platform for a global workforce across Windows, macOS, iOS, and Android.

This role focuses on policy design, Autopilot enrollment, compliance controls, app deployment, and integration with Azure AD and Defender, with emphasis on CIS/NIST-aligned security baselines and maintainable runbooks.

Qualifications

• Hands-on experience with Microsoft Intune including device enrollment, policy management, and app deployment.
• Proficiency with Windows Autopilot for modern device provisioning.
• Deep knowledge of Windows 11 configuration, group policy migration, and endpoint hardening.
• Experience with Azure AD, Conditional Access, and hybrid join scenarios.
• Scripting proficiency in PowerShell for endpoint automation.

Responsibilities

• Design, deploy, and manage Microsoft Intune policies for Windows, macOS, iOS, and Android endpoints.
• Implement Windows Autopilot for zero-touch device provisioning and enrollment workflows.
• Develop compliance policies, conditional access controls, and device configuration profiles.
• Manage application deployment, patching, and software lifecycle through Intune and packaging tools.
• Integrate Intune with Azure AD, Defender for Endpoint, and enterprise security platforms.
• Develop and maintain endpoint security baselines aligned to CIS or NIST standards.
• Troubleshoot endpoint enrollment, policy conflicts, compliance failures, and application deployment issues.
• Maintain Intune documentation, reporting dashboards, and operational runbooks.

Skills

Microsoft Intune

Windows Autopilot

Azure AD

PowerShell

Endpoint security

Policy management

Education

Bachelor’s degree in Information Technology or Computer Science

Tools

Jamf

MSIX

Win32 apps

Winget repository

Job description

Altera is seeking an Endpoint Engineer specializing in Microsoft Intune to design and manage the company’s modern device management platform for a global workforce across Windows, macOS, iOS, and Android.

This role focuses on policy design, Autopilot enrollment, compliance controls, app deployment, and integration with Azure AD and Defender, with emphasis on CIS/NIST-aligned security baselines and maintainable runbooks.