L3 Intune Admin

Job Description

Position Overview

Intune Level 3 Administrator with deep technical expertise in Microsoft Intune and strong fundamentals in modern endpoint management, identity, and endpoint security. The ideal candidate will possess Level 200 knowledge across all aspects of Intune and demonstrate the ability to design, implement, troubleshoot, and optimize enterprise-grade endpoint management solutions.

Key Responsibilities

• Serve as a subject matter expert (SME) for Microsoft Intune administration, policy configuration, and troubleshooting.
• Manage and optimize device lifecycle management, including enrollment, compliance, application deployment, updates, and patching.
• Administer and troubleshoot mobile device management (MDM) and mobile application management (MAM) policies.
• Support Windows Autopilot deployments and zero-touch provisioning processes.
• Configure and manage Conditional Access, compliance policies, and integration with Microsoft Entra ID (Azure AD).
• Ensure endpoint security baselines, hardening policies, and threat protection measures are effectively implemented.
• Provide advanced troubleshooting and root cause analysis for escalated Intune and endpoint management issues.
• Collaborate with security, identity, and infrastructure teams to ensure a holistic approach to endpoint and identity protection.
• Maintain documentation, runbooks, and knowledge articles to standardize operations and support knowledge transfer.
• Mentor and guide Level 1 and Level 2 support teams in Intune operations and best practices.

Required Skills & Qualifications

• Proven experience as an Intune Administrator (Level 3 or equivalent senior role) in a mid-to-large enterprise environment.
• Strong technical knowledge of:
• Device enrollment methods (Autopilot, BYOD, corporate-owned, hybrid).
• Compliance and configuration profiles (Windows, iOS, Android, macOS).
• App lifecycle management (LOB apps, MS Store apps, Win32 app deployment).
• Update management, patch compliance, and reporting.
• Solid understanding of Microsoft Entra ID (Azure AD), including Conditional Access, Hybrid Join, and device identities.
• Familiarity with endpoint security (Defender for Endpoint, BitLocker, security baselines, policy hardening).
• Knowledge of PowerShell scripting and automation for Intune/endpoint management tasks.
• Strong troubleshooting and problem-solving skills with the ability to manage escalations independently.
• Excellent documentation, communication, and cross-team collaboration skills.

Preferred (Nice-to-Have)

• Microsoft certifications such as MS-101, SC-900, MD-102
• Experience with Microsoft Defender for Endpoint, vulnerability management, and security compliance reporting.
• Familiarity with Power BI or KQL for custom reporting and dashboards.
• Understanding of Zero Trust architecture and modern security practices.