Endpoint Systems Engineer SR

We are seeking a proficient M365 Engineer with specialized knowledge in Microsoft Intune Autopilot, Mobile Device Management (MDM), and Mobile Application Management (MAM), The ideal candidate will play a key role in Implementing and refining autopilot including creation of deployment profiles, deployment of key applications and the migration of GPOs to compliance policies. Additionally, this role involves providing advanced support for M365 services as they pertain to our end users and devices Key Responsibilities: Endpoint Management: • Configure and manage Microsoft Intune for device management, ensuring compliance with company policies • Deploy and manage applications, updates, and patches through Intune • Monitor and maintain device inventory and usage • Support and manage Microsoft Cloud PKI service for end points Security Configuration: • Assist with the management of Windows Defender Application Control (WDAC) policies • Assist with managing AppLocker policies to restrict unauthorized applications and enhance security. • Ensure endpoint devices are compliant with security standards and policies. Monitoring and Reporting: • Monitor the performance and usage of M365 services, ensuring optimal functionality. • Generate reports on M365 service usage, security compliance, and incident resolution. • Ability to generate reports utilizing Microsoft Graph as needed within minimal direction Automation of routine activities: • Proficiency in creating and managing runbooks using Azure Automation • Experience with Azure Logic Apps and Azure Functions for automation tasks • Strong skills in PowerShell, Python, or other scripting languages • Ability to write, debug, and optimize scripts for automation Troubleshooting and Support: • Diagnose and resolve technical issues related to endpoint security configurations • Provide support for security-related incidents and work with the IT team to mitigate risks • Conduct regular security assessments and audits to identify vulnerabilities and recommend improvements

• Minimum 5 years of experience in endpoint management and security.
• Expert in Microsoft Intune for device management.
• Strong experience with Windows Intune Autopilot and ownership of the entire zero touch deployment configuration
• Experience with scripting languages (e.g., PowerShell) for automation and configuration.
• Preferred Certifications: Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Azure Solutions Architect Expert, Microsoft 365 Certified: Enterprise Administrator Expert
• Solid understanding of Windows operating systems and security best practices.