Senior Platform Engineer Microsoft

Insight Global (United States); Seattle (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

Insight Global is seeking a senior IT infrastructure engineer to own the Microsoft 365 E5 and Windows endpoint ecosystem, including Intune, SCCM, and cloud patch management. You will lead governance, architecture, deployment, and optimization while mentoring Tier 3 staff and partnering with Security, Compliance, and Service Desk.

Day-to-day duties include building device compliance policies, enrollment workflows, patch strategies, and automation with PowerShell.

Qualifications

• 7+ years IT infrastructure or Microsoft platform experience.
• 5+ years Microsoft 365 administration.
• 5+ years SCCM / Microsoft Configuration Manager.
• 3+ years Intune management and deployment.
• Strong PowerShell scripting and automation.

Responsibilities

• Own Microsoft 365 E5 engineering, configuration, governance and support.
• Evaluate E5 capabilities for adoption, security, automation and license utilization.
• Lead Intune and SCCM optimization and cloud-first strategies.
• Build and manage device compliance policies and conditional access.
• Automate endpoint management tasks using PowerShell and Microsoft tooling.
• Mentor Service Desk and junior engineers; participate in CAB/change processes.

Skills

IT infrastructure

Endpoint engineering

Intune

SCCM

PowerShell

Microsoft 365

Tools

PowerShell

Graph API

JSON/REST

Job description

Job Description

This individual will serve as the senior technical SME and solution owner for the organization's Microsoft 365 E5 and Windows endpoint ecosystem, with significant ownership across Intune, SCCM, Microsoft 365, application deployment, endpoint compliance, and cloud patch management. The engineer will lead efforts to modernize endpoint management toward cloud-first and co-managed solutions, improve application delivery and self-service, strengthen patch compliance, automate administration through PowerShell, and maximize existing Microsoft E5 capabilities. This is a hands‑on senior engineering position that combines deep technical implementation with platform strategy, governance, stakeholder partnership, Tier 3 support, and mentorship.

Day-to-Day:Own Microsoft 365 E5 engineering, configuration, governance, optimization, and operational supportEvaluate E5 capabilities for better adoption, security, compliance, automation, and license utilizationEngineer and optimize Intune and SCCM environmentsLead modernization from SCCM-heavy endpoint management toward cloud-first/co-managed strategiesBuild and manage device compliance policies, configuration profiles, security baselines, and Conditional Access integrationsManage Windows Autopilot, enrollment, provisioning, and endpoint lifecycle processesOwn enterprise application catalog strategy and Company Portal deliveryPackage, test, deploy, maintain, and troubleshoot enterprise applicationsBuild repeatable application intake, testing, approval, deployment, rollback, and publishing processesDesign modern patching strategies using Intune, Windows Update for Business, Autopatch, and SCCMManage update rings, patch compliance, exceptions, maintenance windows, and remediation workflowsBuild endpoint health, patch compliance, and executive reporting dashboardsAutomate Microsoft 365 and endpoint management tasks using PowerShell and related Microsoft toolingDevelop POCs and pilots for new Microsoft capabilitiesPartner closely with Infrastructure, Security, Compliance, Service Desk, Application Support, and business teamsCreate technical roadmaps, architecture documentation, SOPs, runbooks, and support documentationParticipate in change management/CAB processesProvide Tier 3 engineering support and mentor Service Desk/junior engineersTrack platform health, adoption, compliance, deployment success, and other operational KPIs

Skills and Requirements

7+ years of IT infrastructure, endpoint engineering, or Microsoft platform experience5+ years Microsoft 365 administration5+ years SCCM / Microsoft Configuration Manager3+ years Microsoft Intune3+ years software/tools/automation developmentStrong Microsoft 365 E5 administration across Exchange Online, Teams, Outlook, OneDrive, SharePoint, Office apps, Defender, Purview, Copilot, and related servicesAdvanced Intune and SCCM endpoint engineeringWindows 11 enterprise endpoint managementSCCM/Intune co-management, cloud attach, compliance policies, configuration profiles, and deployment ringsWindows Autopilot, enrollment, provisioning, Company Portal, and device lifecycle managementApplication packaging/deployment using MSI, EXE, Win32, Intune, and SCCMStrong Windows patch management including Windows Update for Business, Intune update rings, SCCM software updates/ADRs, and compliance reportingStrong PowerShell scripting and automationEndpoint troubleshooting including enrollment, compliance, policy, application deployment, and configuration issuesStrong documentation and stakeholder communication skillsAbility to independently own Microsoft platform solutions at a senior engineering levelMicrosoft 365 Certified: Endpoint Administrator AssociateMicrosoft Graph PowerShell / Graph API experienceEntra IDDefender for EndpointConditional AccessWindows AutopatchPower BI or similar reporting/dashboard experienceJSON, CSV, REST API, and automation workflow experienceITIL experienceSOX, audit, or regulated-environment experience

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].