Senior Endpoint Engineer: Intune, Entra ID, PKI

Milestone Technologies, Inc.; Torrance (CA); On-site; USD 110,000 - 138,000; Full time

Job summary

Milestone Technologies, Inc. seeks an experienced InTune Endpoint Engineer to lead design, implement, and validate modern device management and security across Windows and other endpoint platforms.

The role focuses on Microsoft Intune, Entra ID, Windows Autopilot, certificate-based authentication, and cross-platform endpoint governance, while supporting PKI/RADIUS integrations and Addigy/Apple/Google deployments. Strong documentation and stakeholder coordination are essential.

Qualifications

• Strong hands-on experience with Microsoft Intune and Microsoft Entra ID.
• Deep knowledge of Windows endpoint management, including Autopilot, enrollment, compliance, configuration profiles, and application deployment.
• Experience with certificate-based authentication, PKI integration, SCEP, and RADIUS.
• Experience integrating endpoint compliance with Conditional Access.
• Working knowledge of Android Enterprise and Managed Google Play.
• Experience supporting cross-platform endpoint governance at enterprise scale.

Responsibilities

• Lead discovery and design workshops to confirm tenant configuration, device platforms, enrollment models, and target-state policy architecture.
• Produce a configuration design document for review and approval prior to build.
• Design and implement Entra ID dynamic device and user group architecture to support policy, application, and Conditional Access targeting.
• Configure Windows Autopilot for cloud provisioning
• Configure Windows enrollment for Entra ID joined devices and Company Portal deployment.
• Package and deploy a representative set of applications using reusable deployment patterns.
• Manage pilot deployment to agreed pilot device groups, including validation, remediation, and sign-off before production rollout.
• Lead integration design for certificate authority topology, certificate templates, and SCEP-based certificate issuance for Intune-managed devices.
• Configure Intune certificate integration with EZ PKI and deploy certificate profiles.
• Design and configure device and user certificate profiles; integrate EZ RADIUS with Intune devices for EAP-TLS.
• Define authorization policies based on Entra ID group membership and device compliance state.
• Create and deploy Wi-Fi and VPN profiles per platform; validate certificate lifecycles.

Skills

Microsoft Intune

Microsoft Entra ID

Windows Autopilot

Enrollment management

Certificate-based authentication

PKI integration

RADIUS

Device hardening

Conditional Access

Cross-platform endpoint governance

Tools

Addigy

Apple Business Manager

JAMF

Managed Google Play

SCEP

Job description

Milestone Technologies, Inc. seeks an experienced InTune Endpoint Engineer to lead design, implement, and validate modern device management and security across Windows and other endpoint platforms.

The role focuses on Microsoft Intune, Entra ID, Windows Autopilot, certificate-based authentication, and cross-platform endpoint governance, while supporting PKI/RADIUS integrations and Addigy/Apple/Google deployments. Strong documentation and stakeholder coordination are essential.