Intune Platform & SME, Design and Build

Key Responsibilities

• Lead the detailed design and build of the Microsoft Intune platform.
• Configure device enrolment, platform restrictions, enrolment profiles, and administrative controls.
• Design and implement Windows Autopilot registration, provisioning, and deployment profiles.
• Configure device configuration profiles, compliance policies, security baselines, and endpoint security policies.
• Implement Intune integration with Microsoft Entra ID, Conditional Access, and Microsoft Defender for Endpoint.
• Configure role-based access control, scope tags, administrative boundaries, and platform governance.
• Design application deployment, update management, reporting, and endpoint monitoring capabilities.
• Support the onboarding and management of approved Windows, mobile, and thin-client devices where applicable.
• Lead platform testing, troubleshooting, defect resolution, and configuration validation.
• Produce detailed designs, configuration documentation, operational procedures, and handover materials.
• Provide specialist guidance to SOE, application packaging, security, identity, and deployment teams.
• Support platform transition to client operational and support teams.
• Key Skills
• Microsoft Intune architecture, design, and implementation
• Windows Autopilot and device enrolment
• Microsoft Entra ID and Conditional Access
• Microsoft Defender for Endpoint integration
• Windows 11 endpoint management
• Intune role-based access control and scope tags
• Device configuration and compliance policies
• Endpoint security and Microsoft security baselines
• Windows Update for Business and Autopatch
• Application deployment and Win32 application management
• Mobile Application Management and Mobile Device Management
• Endpoint Analytics, monitoring, and reporting
• FIDO2, certificate-based authentication, and device identity
• PowerShell and Microsoft Graph automation
• Platform troubleshooting and technical documentation
• Preferred Experience
• Designing and implementing Microsoft Intune for large enterprise environments.
• Delivering Intune and Windows Autopilot solutions in government or highly regulated environments.
• Integrating Intune with Microsoft Entra ID, Conditional Access, Microsoft Defender for Endpoint, and Microsoft 365 services.
• Supporting complex device enrolment, rebuild, repurposing, and lifecycle management scenarios.
• Implementing least-privilege administration, security baselines, compliance controls, and platform governance.
• Supporting enterprise endpoint transformation programs through design, build, testing, and transition to operations.
• You must be an Australian citizen to apply; security clearance is highly regarded