MS Intune Admin

Role Summary

Microsoft Intune Administrator serves as the Subject Matter Expert (SME) for Microsoft Intune and Modern Endpoint Management. The role is responsible for designing, implementing, administering, and troubleshooting enterprise endpoint management solutions across Windows, macOS, iOS, and Android platforms, ensuring security, compliance, and operational excellence while delivering a seamless end-user experience.

Key Responsibilities

Intune Administration & Endpoint Management

• Manage and administer Microsoft Intune (MEM) platform.
• Configure and maintain device enrollment policies.
• Manage Configuration Profiles, Compliance Policies, and Security Baselines.
• Support Windows, iOS, Android, macOS, and BYOD devices.
• Implement and manage Mobile Device Management (MDM) and Mobile Application Management (MAM).

Autopilot & Device Provisioning

• Design and manage Windows Autopilot deployments.
• Support Zero-Touch provisioning and device lifecycle management.
• Configure Hybrid Azure AD Join and Entra ID Join scenarios.

Application Management

• Package and deploy Win32, MSI, Microsoft Store, and Line-of-Business applications.
• Manage Company Portal applications.
• Troubleshoot application deployment failures.
• Create detection methods, requirement rules, and supersedence relationships.

Security & Compliance

• Implement Conditional Access policies.
• Manage Defender for Endpoint integration.
• Configure BitLocker, Windows Hello for Business, and Endpoint Security policies.
• Maintain compliance with organizational security standards.

SCCM Co-Management

• Manage SCCM and Intune co-management workloads.
• Support workload migration from SCCM to Intune.
• Configure Software Updates, Compliance Policies, and Device Configuration workloads.

Automation & Reporting

• Develop PowerShell scripts for automation and reporting.
• Utilize Microsoft Graph APIs for endpoint management tasks.
• Generate compliance and device health reports.

Troubleshooting & Support

• Provide L3 support for complex endpoint incidents.
• Conduct Root Cause Analysis (RCA) for recurring issues.
• Handle escalations from L1/L2 teams.
• Create technical documentation, SOPs, and Knowledge Articles.

Technical Skills

Mandatory

• Microsoft Intune (MEM)
• Windows Autopilot
• Microsoft Entra ID (Azure AD)
• Conditional Access
• Endpoint Security Policies
• Windows 10/11 Administration
• PowerShell Scripting
• Microsoft Defender for Endpoint
• SCCM/MECM Co-Management
• MDM/MAM Concepts

Preferred

• Apple Business Manager (ABM)
• Apple VPP/DEP
• Android Enterprise
• PKI, SCEP, NDES
• Azure Automation
• Graph API
• JAMF (Mac Management)

Required Certifications

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft 365 Certified: Administrator Associate (Preferred)
• Azure Administrator (AZ-104) Preferred

Soft Skills

• Excellent troubleshooting and analytical skills.
• Strong client-facing communication.
• Experience handling critical incidents and escalations.
• Documentation and KT expertise.
• Ability to mentor L1/L2 engineers.

Roles & Expectations

• Act as Intune SME for enterprise endpoint management.
• Lead implementation and migration projects.
• Drive service improvements and automation initiatives.
• Participate in architecture and design discussions.
• Support audits, compliance reviews, and governance activities.

Typical Interview Focus Areas

• Intune Architecture
• Autopilot Deployment Models
• SCCM to Intune Migration
• Conditional Access & Compliance Policies
• Win32 App Packaging & Deployment
• Co-management Workloads
• Defender for Endpoint Integration
• PowerShell & Graph API Automation
• iOS/Android Device Management
• Troubleshooting Intune Enrollment & Sync Issues