About this role
L3 Endpoint Device Management (EDM) – SCCM &
Intune Engineer
Job Summary
We are seeking a highly experienced L3 Endpoint
Device Management (EDM) Engineer/Architect responsible for the design,
architecture, automation, security, and lifecycle management of enterprise
endpoint platforms. The role will provide technical leadership for Microsoft
Intune, SCCM (MECM), Windows Enterprise platforms, endpoint security, application
delivery, and hybrid device management initiatives. The candidate will drive
platform strategy, technical standards, automation, and modernization efforts
while supporting large-scale enterprise environments.
Key Responsibilities
- Lead the
architecture, design, and governance of enterprise endpoint management
platforms including Microsoft Intune and SCCM (MECM).
- Define
endpoint lifecycle management standards covering provisioning, imaging,
software deployment, patch management, compliance, and retirement
processes.
- Design
and implement modern endpoint management solutions leveraging Intune,
Autopilot, Co-Management, and Cloud Attach.
- Develop
and maintain enterprise automation frameworks using PowerShell.
- Lead
operating system deployment (OSD), application packaging, software
distribution, and patch management strategies.
- Architect
endpoint security solutions using Microsoft Defender for Endpoint,
Microsoft Certificate Authority, and security baselines.
- Design
and manage hybrid endpoint environments integrating Active Directory,
Microsoft Entra ID, Azure Arc, SCCM, and Intune.
- Provide
technical leadership for vulnerability remediation programs in partnership
with security teams using Tenable.io and Zafran.
- Establish
monitoring, reporting, compliance, and endpoint health dashboards.
- Support
enterprise desktop virtualization platforms including Citrix Virtual Apps
and Desktops.
- Drive
root cause analysis and resolution of complex endpoint and infrastructure
issues.
- Define
operational standards, SOPs, governance controls, and best practices.
- Lead
major endpoint transformation initiatives, platform upgrades, migrations,
and modernization programs.
- Provide
L3 escalation support for critical incidents and complex technical issues.
Technical Skills
Endpoint Management Platforms
- Microsoft
Intune
- Microsoft
Endpoint Configuration Manager (SCCM/MECM)
- Windows
Autopilot
- Co-Management
- Cloud
Attach
- Windows
Update for Business (WUfB)
- Endpoint
Analytics
Operating Systems & Endpoint Platforms
- Windows
10/11 Enterprise
- Dell
Endpoint Management
- Lenovo
Commercial Device Management
- Device
Lifecycle Management
- Driver
& Firmware Management
Automation & Scripting
- PowerShell
Automation
- Task
Sequence Automation
- Endpoint
Provisioning Automation
- Configuration
Baseline Automation
Security & Compliance
- Microsoft
Defender for Endpoint
- Microsoft
Certificate Authority (PKI)
- Endpoint
Security Baselines
- Conditional
Access Integration
- Device
Compliance Policies
- BitLocker
Administration
- Vulnerability
Remediation
Identity & Hybrid Management
- Microsoft
Entra ID (Azure AD)
- Active
Directory
- Azure Arc
- Hybrid
Join
- Group
Policy Management
Server & Core Infrastructure Services
- DNS
- DHCP
- SMB/File
Services
- Print
Services
- IIS
Administration
Virtualization & VDI
- Citrix
Virtual Apps & Desktops
- Citrix
XenServer
- Application
Virtualization
- Profile
Management
Vulnerability & Risk Management
- Tenable.io
- Zafran
- Security
Patch Management
- Risk-Based
Vulnerability Prioritization
Monitoring & Reporting
- SCCM
Reporting
- Intune
Reporting
- Power BI
(Preferred)
- Endpoint
Compliance Reporting
- Patch
Compliance Dashboards
Preferred Experience
- 7+ years
of experience supporting enterprise endpoint management platforms.
- 5+ years
of experience administering SCCM and Intune environments.
- Experience
managing 10,000+ endpoints in global enterprise environments.
- Experience
with endpoint modernization and migration projects.
- Experience
supporting manufacturing, healthcare, retail, or large enterprise
environments.
- Experience
working within ITIL-based operational environments.