Senior Microsoft Endpoint Management Engineer

| **Role Positioning** This senior role is intentionally balanced across Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune, with responsibilities split between traditional endpoint management and modern cloud-based endpoint management. | | --- | | **Functional Split** | **Level** | **Core Platforms** | **Ideal Certifications** | | --- | --- | --- | --- | | 50% MECM / SCCM 50% Microsoft Intune | Senior Engineer / Consultant | MECM, Intune, Entra ID, Windows Autopilot | MD-102 and MS-102 | # Job Summary The Senior Microsoft Endpoint Management Engineer is responsible for designing, implementing, maintaining, and supporting enterprise endpoint management solutions using both Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune. This role serves as a subject matter expert for traditional and modern endpoint management, including operating system deployment, application lifecycle management, device compliance, security controls, endpoint analytics, and cloud-based device management. The ideal candidate possesses deep expertise in both MECM and Intune and can help organizations modernize endpoint management through co-management, Microsoft Entra ID integration, Windows Autopilot, and cloud-native management strategies. # Key Responsibilities ## Microsoft Endpoint Configuration Manager (MECM / SCCM) - Design, implement, administer, and maintain MECM infrastructure, including site systems, boundaries, boundary groups, distribution points, and client settings. - Monitor MECM health, performance, and availability; perform upgrades, hotfix installations, and environment maintenance. - Design and maintain Windows 10/11 operating system deployment task sequences for bare-metal, refresh, and in-place upgrade scenarios. - Manage boot images, driver repositories, deployment media, and PXE/task sequence troubleshooting. - Package, test, deploy, and maintain enterprise applications using MSI, EXE, PowerShell, scripts, and establish detection methods, dependencies, supersedence, and deployment requirements. - Manage Windows and third-party patching solutions, including deployment rings, maintenance windows, compliance monitoring, and remediation. ## Microsoft Intune / Cloud Endpoint Management - Design, implement, and administer Microsoft Intune environments for Windows, macOS, iOS, and Android device management. - Configure device enrollment, Microsoft Entra ID join, hybrid join, compliance policies, configuration profiles, device restrictions, and endpoint security policies. - Design and implement Windows Autopilot scenarios, including user-driven, pre-provisioned, and self-deploying deployments. - Configure Enrollment Status Page behavior, Autopilot profile assignments, and troubleshoot enrollment and provisioning issues. - Package and deploy Win32, Microsoft Store, Microsoft 365 Apps, and line-of-business applications; manage application lifecycle and update processes. - Configure and maintain security baselines, BitLocker management, Endpoint Privilege Management, Microsoft Defender integration, and Conditional Access integration. ## Co-Management & Endpoint Modernization - Design and implement MECM/Intune co-management solutions and migrate workloads between MECM and Intune. - Develop endpoint modernization roadmaps that guide customers from traditional device management to cloud-native management. - Assess customer endpoint environments and recommend best-practice architectures for modern management, compliance, and security. - Lead technical workshops, design sessions, implementation efforts, and customer-facing endpoint management projects. ## Automation, Documentation & Reporting - Develop PowerShell scripts for endpoint automation, administration, reporting, and remediation. - Integrate endpoint management workflows with Microsoft Graph API where applicable. - Create and maintain technical documentation, SOPs, runbooks, architecture diagrams, and implementation guides. - Develop reports us…