Senior Workplace Engineer
Location: Remote
Duration: 9-12 Month
JD
The assigned resources will provide administration and operational support activities (as per the directions & decisions of Care Source only) related to the following platforms:
Microsoft Intune Administration
Activities may include:
Manage and administer Microsoft Intune-managed endpoints, ensuring device enrollment, configuration, compliance, and lifecycle management across Windows, iOS, Android, and macOS platforms.
Configure, deploy, and support Windows Autopilot profiles to enable automated device provisioning, enrollment, and user onboarding.
Create, manage, and troubleshoot Intune Configuration Profiles to enforce device settings, security baselines, and enterprise standards.
Implement and maintain Compliance Policies to monitor device health, enforce corporate security requirements, and ensure regulatory compliance.
Administer endpoint security controls including BitLocker encryption and Local Administrator Password Solution (LAPS), ensuring secure device access and data protection.
Monitor device compliance, application deployment status, and policy enforcement, performing remediation activities to resolve endpoint management issues.
GPO to Intune Migration
Activities may include:
Assess and analyze existing Group Policy Objects (GPOs) to identify migration candidates and policy dependencies.
Map and convert applicable GPO settings into Microsoft Intune Configuration Profiles, Compliance Policies, and Endpoint Security policies.
Configure and manage ADMX-backed policies within Intune to replicate required administrative template settings.
Validate policy migration outcomes through testing, troubleshooting, and compliance verification across managed endpoints.
Implement modern device management best practices by transitioning from traditional on-premises policy management to cloud-based Intune management.
Optimize device configuration and security posture by consolidating and standardizing policies within the Intune administration framework.
Support phased migration, pilot deployments, policy coexistence, and post-migration remediation activities to ensure minimal user disruption.
App Packaging and Deployment
Activities may include:
Packaging applications for the Windows32 (Physical and Virtual) through Microsoft Intune Company Portal, including application assignments, dependencies and release management activities
Perform Source code verification, packaging, Quality Assurance, UAT, Review Implementation, Move to Production, Prepilot deployment tests
Configuring restricted deployments by creating the required security group and collection to control application installation.
Troubleshoot and resolve application packaging, installation, and deployment issues, including remediation of failed deployments and deployment optimization.
Develop and maintain PowerShell scripts to automate application packaging, deployment, detection, remediation, and uninstall processes Enable Auto update for packages using exception process
Monitor deployment success, analyze deployment failures, and provide reporting to ensure application availability.
Collaborate with application owners, platform teams, and end users to support testing, deployment planning, issue resolution, and continuous service improvement
App compatibility testing for new / version upgrade of apps
Assisting UAT scenarios complex with hardware dependencies
Windows Patching & Endpoint Lifecycle
Activities may include:
Manage and administer Windows operating system patching across enterprise endpoints, including deployment of security, quality, and feature updates.
Configure, monitor, and maintain Windows Update for Business (WUfB), Autopatch, and Intune/SCCM-based patch management solutions.
Perform patch testing, validation, pilot deployments, and phased rollouts to minimize business disruption.
Monitor patch compliance, remediate update failures, and ensure adherence to organizational security and compliance requirements.
Manage Windows 10/11 feature updates, operating system servicing, version upgrades, and end-of-support transitions.
Support endpoint provisioning, build refreshes, re-imaging, and device replacement activities throughout the endpoint lifecycle.
Maintain endpoint health, performance, and security posture through proactive monitoring, troubleshooting, and remediation.
Support device enrollment, configuration, compliance validation, and lifecycle governance for corporate-managed endpoints.
