Works closely with senior engineers, architects, cloud teams, cybersecurity personnel, service desk teams, and system owners to sustain existing endpoint-management services and support the migration of appropriate workloads to Microsoft Intune and other cloud-based capabilities. Performs day-to-day administration of application deployments, software updates, device collections, operating system deployment task sequences, configuration baselines, endpoint compliance, and vulnerability-remediation activities across enterprise Windows environments.