Senior Endpoint Management Engineer ( Intune & Entra ID)

&

• *Hi,**
• *Greetings from CES LTD:**
• *Website Link :** **https://www.cesltd.com**
• *Headquarted AT : Chicago ( Illinois )**
• *Certified AS : CMMI Level 5 Organisation**
• *Job Description: Senior Endpoint Management Engineer (Intune & Entra ID)**

Job Summary

We are seeking a **highly experienced Senior Endpoint Management Engineer** with strong expertise in **Microsoft Intune, Entra ID (Azure AD), PowerShell automation, and endpoint patching**. The role will be responsible for implementing, and managing modern device management and identity solutions while ensuring security, compliance, and operational excellence across the enterprise.

This position requires a handson engineer who can **lead Intune and patching initiatives**, automate processes, troubleshoot complex issues, and collaborate closely with security and infrastructure teams.

Key Responsibilities

Endpoint Management & Intune

• Design, deploy, and manage **Microsoft Intune** for Windows 10/11 devices.
• Configure and manage:
• Configuration Profiles
• Compliance Policies
• Device Restrictions
• Administrative Templates
• Implement and manage **Windows Autopilot** for zerotouch provisioning.
• Manage application deployment, updates, and remediation via Intune.

Patching & Updates

• Own and manage **endpoint patching strategy** using:
• Windows Update for Business (WUfB)
• Update Rings
• Feature Updates
• Quality Updates
• Expedited Updates
• Ensure timely patch compliance and minimal business disruption.
• Troubleshoot Windows Update and patch deployment failures.
• Generate and maintain **patch compliance and audit reports**.

Identity & Access (Entra ID / Azure AD)

• Manage **Entra ID (Azure AD)** for device identity and access control.
• Configure and maintain:
• Conditional Access policies
• Device-based access controls
• Azure AD Join / Hybrid Azure AD Join
• Support secure authentication and access governance models.

Security & Compliance

• Integrate and manage **Microsoft Defender for Endpoint** with Intune.
• Deploy security baselines and endpoint hardening policies.
• Implement proactive and reactive device remediation scripts.
• Work closely with the Security team to address vulnerabilities and incidents.

Automation & PowerShell

• Develop and maintain **advanced PowerShell scripts** for:
• Device management
• Policy remediation
• Reporting and monitoring
• Leverage **Microsoft Graph API** for Intune automation and bulk operations.
• Improve operational efficiency through scripting and automation.

Troubleshooting & Operations

• Act as L3 escalation for complex Intune, identity, and patching issues.
• Perform root cause analysis and implement permanent fixes.
• Maintain documentation, SOPs, and operational runbooks.
• Support change management and production rollouts.

Required Skills & Experience

• 7+ years of experience in **Endpoint / EUC engineering**
• 35+ years of **handson Microsoft Intune administration**
• Strong experience with:
• Microsoft Intune
• Entra ID (Azure AD)
• Endpoint patch management (Windows)
• PowerShell scripting (advanced)
• Deep understanding of:
• Windows 10/11 management
• WUfB and Intune update mechanisms
• Conditional Access and device compliance
• Proven troubleshooting skills across Intune, identity, and Windows updates

Nice to Have / Preferred Skills

• Windows Autopatch experience
• SCCM / MECM and Comanagement
• macOS or iOS device management via Intune
• Microsoft Defender XDR exposure
• Azure fundamentals and scripting with REST APIs
• ITIL or formal change management experience

Soft Skills

• Strong analytical and problemsolving skills
• Ability to work independently and lead initiatives
• Excellent communication and documentation skills
• Experience mentoring junior engineers
• Comfortable working in enterprise production environments

Location: Hyderabad\Chennai

Hybrid

Regards,

Kanchana

CES LTD!