Microsoft Intune Architect

JobDescription:MicrosoftIntuneArchitect

• Location:PalmBeachGardens,Florida

• Duration:6months

• GBaMSReqID:11035742

• JobTitle:MicrosoftIntuneArchitect/ModernEndpointManagementArchitect

• Domain:EnterpriseITInfrastructure,EndpointManagement,andSecurity

Must-HaveTechnicalSkills

• MicrosoftIntuneandMicrosoftIntuneSuite.

• MicrosoftConfigurationManager(SCCM).

• WindowsAutopilot.

• MicrosoftEntraID.

• MicrosoftEntraJoinandHybridJoin.

• ConditionalAccess.

• IntuneConfigurationProfiles.

• DeviceCompliancePolicies.

• EndpointSecurityPolicies.

• Applicationdeploymentandmanagement.

• Windows10/11endpointmanagement.

• MobileDeviceManagement(MDM).

• MobileApplicationManagement(MAM).

• SCCM/IntuneCo-management.

• CloudAttach.

• MicrosoftDefenderintegration.

• WindowsSecurityBaselines.

• BitLockerandendpointsecurityconfiguration.

• PowerShellscriptingandautomation.

• MicrosoftGraphautomation.

• Advancedtroubleshootingandroot-causeanalysis.

RolesandResponsibilities

1.MicrosoftIntuneArchitectureandDesign

• Designenterprise-scaleMicrosoftIntunearchitectureformodernendpointmanagement.

• Leadimplementation,migration,andtransformationinitiativesinvolvingMicrosoftIntuneandConfigurationManager/SCCM.

• Developscalableandsecureendpoint-managementsolutionsalignedwithenterpriserequirements.

• Defineendpoint-managementarchitecture,standards,andbestpractices.

• Preparearchitecturediagrams,technicalspecifications,andimplementationstrategies.

2.IntuneConfigurationandPolicyManagement

• DesignandimplementIntuneconfigurationprofiles.

• Developdevicecompliancepoliciesandendpointsecuritypolicies.

• Definedeviceconfiguration,enrollment,provisioning,andmanagementstandards.

• Establishdevicecomplianceandsecurityrequirements.

• ConfigureandmanagepoliciesforenterpriseWindowsendpoints.

• Ensureconsistentendpointconfigurationsacrosstheorganization.

3.WindowsAutopilotandDeviceProvisioning

• ArchitectandimplementWindowsAutopilotformodernWindowsdeviceprovisioning.

• Designautomateddeviceenrollmentanddeploymentprocesses.

• ConfigureprovisioningworkflowsforenterpriseWindowsdevices.

• SupportMicrosoftEntrajoinedandhybridjoineddevices.

• Definedeviceenrollment,configuration,provisioning,andretirementprocesses.

• Troubleshootdeviceprovisioningandenrollmentissues.

4.MicrosoftEntraIDandConditionalAccess

• DesignsolutionsforMicrosoftEntraIDintegrationwithIntune.

• ImplementMicrosoftEntraJoinandHybridJoinstrategies.

• DesignConditionalAccesssolutionsincollaborationwithidentityandcybersecurityteams.

• Integratedevicecompliancewithidentityandaccess-managementcontrols.

• Troubleshootauthentication,enrollment,andaccess-relatedissues.

• Ensureendpointaccesspoliciesalignwithenterprisesecurityrequirements.

5.SCCM/IntuneCo-managementandCloudAttach

• DeveloparchitectureforSCCM/Intuneco-management.

• DesignCloudAttachstrategiestotransitionfromtraditionalendpointmanagementtomodernmanagement.

• LeadmigrationinitiativesinvolvingMicrosoftConfigurationManagerandIntune.

• Defineworkloadtransitionandmigrationstrategies.

• Assessexistingendpoint-managementenvironmentsandidentifymodernizationopportunities.

• Planandexecutemigrationroadmapsforlegacyendpoint-managementplatforms.

6.EndpointSecurityandMicrosoftDefender

• Developendpointsecuritystandardscoveringdevicecomplianceandendpointprotection.

• IntegrateMicrosoftDefenderwithIntune-managedendpoints.

• ConfigureWindowssecuritybaselinesandendpointsecuritypolicies.

• ImplementBitLockerdiskencryptionandrelatedsecurityconfigurations.

• Defineendpointprotection,securitycompliance,anddevice-hardeningrequirements.

• Collaboratewithcybersecurityteamstoimplemententerprisesecuritycontrols.

7.ApplicationDeploymentandLifecycleManagement

• DesignapplicationpackaginganddeploymentstrategiesusingIntune.

• Developapplicationinstallation,update,andlifecycle-managementprocesses.

• Manageenterpriseapplicationdeploymentacrosssupportedendpointplatforms.

• Troubleshootapplicationinstallation,configuration,anddeploymentfailures.

• Defineapplicationassignmentanddeploymentstandards.

• Ensureapplicationscomplywithorganizationalsecurityandconfigurationrequirements.

8.Multi-PlatformEndpointManagement

• SupportendpointmanagementacrossWindows,iOS/iPadOS,Android,andmacOS,whereapplicable.

• DesignMobileDeviceManagement(MDM)andMobileApplicationManagement(MAM)solutions.

• Establishdeviceenrollmentandcompliancepoliciesforsupportedplatforms.

• Defineendpointconfiguration,security,andretirementprocedures.

• Ensureendpoint-managementsolutionsmeetenterpriseoperationalandsecurityrequirements.

9.PowerShellScriptingandAutomation

• DevelopPowerShellscriptstoautomateendpoint-managementtasks.

• UseMicrosoftGraphwhereappropriatetoautomateIntuneadministrationandreporting.

• Identifyopportunitiestoimproveoperationalefficiencythroughautomation.

• Automaterepetitivedeviceconfiguration,management,andtroubleshootingactivities.

• Maintainreusablescriptsandautomationproceduresinaccordancewithtechnicalstandards.

10.TroubleshootingandTechnicalSupport

• Troubleshootcomplexdeviceenrollmentandprovisioningissues.

• Resolveconfigurationprofile,applicationdeployment,anddevicecomplianceproblems.

• InvestigateauthenticationandConditionalAccessissues.

• Performroot-causeanalysisforendpoint-managementfailures.

• Developcorrectiveactionsandpreventivesolutions.

• Providetechnicalguidancetoendpoint-managementadministratorsandengineeringteams.

11.DocumentationandTechnicalLeadership

• PrepareHigh-LevelDesign(HLD)andLow-LevelDesign(LLD)documents.

• Developsolutiondiagrams,implementationplans,andmigrationplans.

• CreateStandardOperatingProcedures(SOPs)andtechnicalstandards.

• Conducttechnicalworkshopsandarchitecturereviews.

• Collaboratewithinfrastructure,security,identity,networking,application,andsupportteams.

• ProvidetechnicalleadershipandguidancetoIntune/SCCMadministratorsandengineeringteams.

IdealCandidateProfile

• Seniorendpoint-managementarchitectwithstronghands-onexperienceinMicrosoftIntuneandSCCM.

• ProvenexpertiseinWindowsAutopilot,MicrosoftEntraID,ConditionalAccess,andendpointsecurity.

• Experiencetransitioningtraditionalendpoint-managementenvironmentstomoderncloud-basedmanagement.

• Strongknowledgeofapplicationdeployment,devicecompliance,securitybaselines,andco-management.

• ProficiencyinPowerShellautomationandMicrosoftGraph.

• Excellentarchitecturedocumentation,troubleshooting,andtechnicalleadershipskills.