Senior Intune & Entra ID CA Engineer — Remote

infini-tek; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

infini-tek seeks an experienced Microsoft Intune and Conditional Access Engineer to design, implement, and troubleshoot CA policies across Entra ID and Intune, securing access to enterprise apps and resources for managed and BYOD devices.

The role requires hands-on expertise with Entra ID, CA policy design, MFA configurations, and integration with Microsoft 365 security. Remote/hybrid work with potential on-site days, and collaboration across security and IT teams.

Qualifications

• 8+ years in Microsoft infrastructure, endpoint management, or identity and access management.
• 3+ years implementing and troubleshooting Entra ID Conditional Access Policies.
• Strong experience administering Microsoft Intune in enterprise environments.
• Deep understanding of Intune device compliance and Entra Conditional Access.
• Proven troubleshooting of CA policy conflicts, sign-ins, and device compliance.
• Knowledge of MFA, authentication methods, and Microsoft 365 authentication.

Responsibilities

• Design, implement, manage, and troubleshoot Microsoft Entra ID Conditional Access Policies.
• Configure CA policies based on user groups, device compliance, application sensitivity, location, and sign-in risk.
• Implement and manage MFA, authentication strengths, and risk-based access controls.
• Integrate CA with Intune device compliance policies.
• Troubleshoot CA failures using Entra ID sign-in logs, policy evaluation details, and What If analysis.
• Manage CA for managed, unmanaged, and BYOD devices.
• Configure device-based access restrictions and review security gaps to recommend improvements.
• Test and deploy policies using report-only mode and phased rollouts.

Skills

Microsoft Intune

Entra ID / Azure AD

Conditional Access

MFA

Zero Trust

Identity & Access Management

Endpoint Management

Troubleshooting

Policy Design

Tools

PowerShell

Microsoft Graph API

Job description

infini-tek seeks an experienced Microsoft Intune and Conditional Access Engineer to design, implement, and troubleshoot CA policies across Entra ID and Intune, securing access to enterprise apps and resources for managed and BYOD devices.

The role requires hands-on expertise with Entra ID, CA policy design, MFA configurations, and integration with Microsoft 365 security. Remote/hybrid work with potential on-site days, and collaboration across security and IT teams.