Position Overview
We are seeking a highly experienced Microsoft Cloud Infrastructure and Endpoint Management Engineer / Architect with deep expertise in Microsoft Intune, Microsoft Entra ID, Azure Virtual Desktop (AVD), Windows 365, and enterprise Windows environments.
The ideal candidate will have extensive experience designing, implementing, automating, and supporting large-scale Microsoft infrastructure solutions across cloud and hybrid environments.
This role requires strong hands-on engineering capabilities, particularly in endpoint configuration, identity and access management, Conditional Access Policies, infrastructure automation, and enterprise cloud desktop platforms.
Key Responsibilities
Microsoft Intune & Endpoint Management
· Design, deploy, and manage Microsoft Intune solutions across enterprise environments.
· Develop and maintain device configuration, compliance, and endpoint security policies.
· Manage Windows device provisioning, enrollment, and lifecycle management using Microsoft Intune and Windows Autopilot.
· Integrate Microsoft Intune with Microsoft Entra ID and Microsoft Defender for Endpoint.
· Implement and troubleshoot endpoint configuration policies across physical and virtual Windows environments.
· Optimize endpoint security, performance, compliance, and operational efficiency.
Microsoft Entra ID & Conditional Access
· Design, implement, and manage Microsoft Entra ID Conditional Access Policies.
· Configure identity-based and device-based access controls for enterprise applications.
· Integrate Conditional Access with Microsoft Intune device compliance requirements.
· Implement MFA, device trust, and Zero Trust access strategies.
· Troubleshoot authentication failures, policy conflicts, and device compliance issues.
· Evaluate and improve existing Conditional Access configurations to strengthen enterprise security.
Azure Virtual Desktop & Windows 365
· Architect, deploy, and support enterprise Azure Virtual Desktop and Windows 365 environments.
· Design and optimize cloud desktop infrastructure for performance, scalability, security, and cost efficiency.
· Manage AVD host pools, application groups, user profiles, and FSLogix configurations.
· Support migrations from traditional VDI platforms to Azure Virtual Desktop and Windows 365.
· Integrate cloud desktop platforms with Microsoft Intune, Entra ID, and enterprise security controls.
· Implement automation for desktop provisioning, management, monitoring, and optimization.
Infrastructure Automation & Engineering
· Develop advanced PowerShell scripts to automate infrastructure and endpoint management.
· Leverage Microsoft Graph API for automation, reporting, and integration with Microsoft 365 services.
· Implement Infrastructure-as-Code using Terraform.
· Develop scalable automation frameworks for provisioning, configuration, and lifecycle management.
· Integrate Microsoft cloud infrastructure with enterprise IT service management platforms.
· Identify opportunities to improve operational efficiency through automation.
Enterprise Architecture & Security
· Design and support enterprise Windows infrastructure across on-premises, Azure, and hybrid environments.
· Implement security controls using Microsoft Defender for Endpoint, Intune, and Entra ID.
· Develop architecture standards, technical documentation, and operational best practices.
· Collaborate with infrastructure, cybersecurity, identity management, and application teams.
· Lead technical assessments, platform modernization initiatives, and complex troubleshooting efforts.
· Evaluate emerging Microsoft technologies and recommend architectural improvements.
Required Qualifications
· 10+ years of experience in Microsoft infrastructure engineering, enterprise endpoint management, or cloud architecture.
· Strong hands-on experience with Microsoft Intune and Microsoft Entra ID.
· Experience implementing and troubleshooting Microsoft Entra ID Conditional Access Policies.
· Extensive experience with Azure Virtual Desktop, Windows 365, or enterprise virtual desktop infrastructure.
· Advanced PowerShell scripting and automation capabilities.
· Experience with Microsoft Graph API and infrastructure automation.
· Strong knowledge of Active Directory, hybrid identity, and Microsoft 365 administration.
· Experience with Microsoft Defender for Endpoint and enterprise security configurations.
· Strong understanding of Windows operating systems, device management, and enterprise infrastructure.
· Demonstrated experience supporting complex, large-scale enterprise environments.
· Excellent troubleshooting, architectural design, and technical communication skills.
Preferred Qualifications
· Experience with Terrafor
