Senior UEM Engineer: Intune & Cloud Modernization

Global Enterprise Services, Llc; Fort Meade (MD); On-site; USD 145,000 - 160,000; Full time

Job summary

Global Enterprise Services, Llc is seeking a Senior Unified Endpoint Management Engineer to lead design and deployment of Intune-based solutions. You will modernize endpoints, migrate MECM/AD to Azure AD–joined Intune environments, and collaborate across security and operations teams to deliver compliant, scalable device management.

Responsibilities include policy configuration, app deployment, Autopilot provisioning, WUfB patching, and integration with Microsoft 365 security tools.

Qualifications

• Bachelor’s degree with 4+ years of relevant experience, or Master’s degree with 2+ years of experience (additional experience may be considered in lieu of degree)
• Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
• Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
• Strong proficiency in PowerShell scripting to automate administrative tasks, streamline deployments, and troubleshoot endpoint issues.
• Experience collaborating directly with customers, end users, and stakeholders to gather requirements, provide project updates, and deliver technical solutions.
• Excellent communication, organizational, analytical, and problem-solving skills with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Working knowledge of Atlassian tools, including Jira and Confluence, for project tracking, documentation, and team collaboration.

Responsibilities

• Lead the design, architecture, and deployment of Microsoft Intune solutions aligned with enterprise security, compliance, and user experience requirements.
• Drive endpoint modernization efforts, including migration from MECM and traditional AD-joined devices to Azure AD–joined and Intune-managed environments.
• Develop and manage Intune policies and configurations, including compliance policies, configuration profiles, and application deployment strategies.
• Package, deploy, and lifecycle-manage applications in Intune, emphasizing automation, version control, and end-user experience.
• Architect and implement Windows 10/11 provisioning and deployment solutions using Intune, Autopilot, Enrollment Status Page (ESP), and modern provisioning techniques.
• Configure and optimize Windows Update for Business (WUfB) to ensure secure, reliable, and timely OS patching.
• Collaborate with infrastructure and identity teams to translate and modernize Group Policy Objects (GPOs) into Intune-based controls (Settings Catalog, ADMX-backed policies).
• Partner with Active Directory and MECM/SCCM teams to ensure coexistence strategies and migration readiness.
• Integrate Intune with the broader Microsoft 365 ecosystem, including Defender for Endpoint, Conditional Access, and Zero Trust security models.
• Implement and enforce endpoint security best practices, including encryption, endpoint protection, compliance baselines, and data loss prevention.
• Support security operations by monitoring endpoint-related incidents and integrating telemetry with SIEM/SOC workflows.
• Identify opportunities to optimize endpoint management processes, recommending improvements and driving adoption of modern management capabilities.
• Develop and maintain comprehensive technical documentation, including architecture diagrams, configuration standards, and migration strategies.

Skills

PowerShell scripting

Microsoft Intune

Endpoint management

Azure AD

MECM/SCCM

Education

Bachelor’s degree or Master’s degree in a related field

Tools

Jira

Confluence

Autopilot

Job description

Global Enterprise Services, Llc is seeking a Senior Unified Endpoint Management Engineer to lead design and deployment of Intune-based solutions. You will modernize endpoints, migrate MECM/AD to Azure AD–joined Intune environments, and collaborate across security and operations teams to deliver compliant, scalable device management.

Responsibilities include policy configuration, app deployment, Autopilot provisioning, WUfB patching, and integration with Microsoft 365 security tools.