Endpoint & Intune Engineer

RGP is a global consulting firm helping recognized companies transform their organizations. They are seeking an experienced Endpoint & Intune Engineer to participate in modern workplace transformation and endpoint security initiatives, focusing on designing and implementing a cloud-first endpoint management ecosystem.

Responsibilities:

• Architect and deploy modern endpoint management solutions using Microsoft Intune
• Design and build a new enterprise tenant in Microsoft 365. Configure and optimize core workloads within Microsoft 365 (Exchange Online, SharePoint Online, Teams)
• Develop enterprise-grade device lifecycle strategy (procurement to retirement)
• Establish governance standards, RBAC model, and operational boundaries. Configure compliance policies, configuration profiles, security baselines, and update rings
• Implement MDM/MAM strategies across Windows, macOS, iOS, and Android
• Design and implement Windows provisioning with Windows Autopilot
• Lead co-management strategy and migration from on-prem management using Microsoft Configuration Manager
• Implement identity and access controls using Microsoft Entra ID
• Design Conditional Access policies aligned to Zero Trust principles
• Configure and enhance endpoint protection using Microsoft Defender for Endpoint
• Implement data protection, DLP, and compliance controls within Microsoft 365
• Support tenant-to-tenant migrations, consolidation, or optimization projects (if applicable)
• Implement endpoint security baselines using Microsoft Defender for Endpoint
• Configure attack surface reduction, EDR, and vulnerability management
• Deploy DLP, retention, and data classification within Microsoft 365
• Build monitoring dashboards and compliance reporting
• Support audit readiness and regulatory alignment (SOX, HIPAA, ISO as applicable)

Requirements:

• 8+ years of experience in endpoint engineering or M365 administration
• Deep expertise in Microsoft Intune architecture and administration in enterprise or multi-tenant environments
• Proven experience in enterprise M365 deployments
• Strong experience with Microsoft Entra ID and Conditional Access
• Experience deploying Windows Autopilot at scale
• Strong PowerShell scripting and automation skills
• Experience with hybrid and cloud-only environments
• Solid understanding of Zero Trust architecture and modern security frameworks
• Microsoft Certified: Endpoint Administrator Associate
• Microsoft 365 Certified: Enterprise Administrator Expert
• Microsoft Certified: Security Administrator Associate