Job Description
This role leads engineering and administration of Microsoft endpoint management, primarily Intune, Windows Autopilot, Group Policy, and conditional access, covering everything from workstation imaging and patching to device lifecycle for both on-site and remote/VDI users. It includes engineering endpoint telemetry and logging into SIEM/EDR platforms, supporting passwordless and hardware-backed authentication for privileged accounts, and handling escalated Service Desk issues around imaging, enrollment, and compliance. The role also produces documentation and runbooks for Service Desk and IRM teams, and coordinates implementations across Cybersecurity, IAM, SOC, and IRM stakeholders under formal change control.
