InTune Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and establish the architecture and governance for enterprise Microsoft Intune.

• Oversee the migration strategy from Blackberry UEM to Intune and manage SCCM/Configuration Manager co-management initiatives.

• Create policies for device compliance, configuration profiles, application deployment standards, and strategies for update management.

• Develop Conditional Access, security baselines, BitLocker governance, and integrate Defender for Endpoint.

• Architect solutions for Entra ID device identity, authentication, and access management.

• Create automation scripts using PowerShell, along with practices for reporting and configuration-as-code.

• Lead pilot deployments, manage migration waves, conduct executive briefings, and facilitate stakeholder communications.

• Generate technical standards, architecture documentation, and operational procedures.

• Provide support for the TALON Program under Accenture Federal Services for the Transportation Security Administration.

• Collaborate with Security, Identity, Networking, and Engineering teams to implement a Zero Trust-aligned endpoint platform.

⛳️ Requirements

• At least 8 years of experience in endpoint management, systems engineering, or a related discipline.

• A minimum of 3 years of experience designing Microsoft Intune solutions in enterprise settings.

• In-depth knowledge of Microsoft Intune, Autopilot, device compliance and configuration profiles, application lifecycle management (Win32, MSIX, MAM), RBAC, and scope management.

• Familiarity with Conditional Access, Microsoft Defender for Endpoint, Entra ID (Azure AD), SCCM/Configuration Manager co-management, PowerShell automation, and MDM/MAM administration.

• Proven track record in leading large-scale enterprise endpoint modernization initiatives.

• Must be eligible to obtain and retain a Public Trust clearance or higher.

• Preferred: experience in supporting federal agencies or working within Public Trust environments.

• Preferred: understanding of Zero Trust architecture and NIST 800-53 controls.

• Preferred: experience with FedRAMP and ATO processes.

• Preferred advanced knowledge of Defender for Endpoint, KQL and Log Analytics, Attack Surface Reduction (ASR), certificate management (SCEP/PKCS), and Wi-Fi and VPN architecture.

• Preferred experience with Terraform, Bicep, Git-based governance, and Infrastructure as Code.

• Preferred strong experience in incident response, disaster recovery, and change management.

🏝️ Benefits

• Benefits available.

• Fully remote work arrangement.