Microsoft Intune lead

Job Summary

We are seeking an experienced Microsoft Intune & Entra Team Lead to lead the Endpoint Management and Identity Management practice. The ideal candidate should have strong hands-on experience in Microsoft Intune, Microsoft Entra ID, SCCM/MECM, Windows Endpoint Management, security and compliance controls, and team leadership. This role will be responsible for designing, implementing, and supporting enterprise device management and identity solutions while leading a team of engineers and acting as the primary technical escalation point.

Key Responsibilities

Technical Leadership

• Lead enterprise deployments of Microsoft Intune and Microsoft Entra ID solutions.
• Design and implement modern workplace and endpoint management strategies.
• Lead migrations from SCCM/MECM, JAMF, Workspace ONE, or other MDM tools to Microsoft Intune.
• Architect and implement device enrollment, compliance, configuration, and endpoint security controls.
• Design and manage Conditional Access, MFA, SSO, RBAC, and identity governance solutions.
• Implement Windows Autopilot and zero-touch deployment models.
• Manage co-management scenarios involving SCCM/MECM and Microsoft Intune.
• Define endpoint security standards, operational procedures, and best practices.

Team Management

• Lead and mentor L1 and L2 Endpoint Management Engineers.
• Conduct technical reviews, architecture validations, and solution quality checks.
• Manage resource planning, task allocation, and delivery priorities.
• Support employee skill development, technical certifications, and knowledge-sharing initiatives.
• Drive operational excellence, service improvements, and process standardization.

Customer Engagement

• Conduct customer workshops, discovery sessions, and requirements gathering discussions.
• Prepare High-Level Design (HLD), Low-Level Design (LLD), implementation plans, and technical documentation.
• Participate in pre-sales activities, solution design, and effort estimation.
• Act as the highest technical escalation point for customer issues and critical incidents.
• Present solution roadmaps, recommendations, and improvement plans to stakeholders.

Operations & Governance

• Ensure SLA adherence and service delivery excellence.
• Monitor endpoint compliance, identity security posture, and configuration health.
• Review change requests, deployment activities, and production rollout plans.
• Maintain technical documentation, SOPs, and knowledge repositories.
• Ensure implementations align with security, compliance, and governance requirements.

Required Technical Skills

Technology Area

Required Skills

Microsoft Intune

Device enrollment management, compliance policies, configuration profiles, security baselines, endpoint security policies, Mobile Application Management (MAM), application packaging and deployment, Windows Autopilot, BitLocker management, and Endpoint Privilege Management.

Microsoft Entra ID

Identity and access management, Conditional Access, MFA, SSO, Privileged Identity Management, identity governance, access reviews, RBAC administration, and hybrid identity.

SCCM / MECM

SCCM infrastructure administration, software distribution, OS deployment, patch management, co-management with Intune, client health monitoring, inventory and reporting, and SCCM to Intune migration planning.

Security Technologies

Microsoft Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Microsoft security best practices, and Zero Trust architecture.

Automation

PowerShell scripting, Microsoft Graph API, endpoint automation, reporting automation, and operational task standardization.

Required Experience

• Minimum 8 years of overall IT experience.
• Minimum 6 years of hands-on Microsoft Intune administration experience.
• Minimum 3 years of Microsoft Entra ID administration experience.
• Strong experience in SCCM/MECM administration and co-management scenarios.
• Experience managing teams of security, endpoint, or modern workplace engineers.
• Experience handling enterprise environments with 1,000+ endpoints.
• Experience in Intune migration projects and Modern Workplace implementations.
• Experience in customer-facing consulting and managed services engagements.

Preferred Certifications

Mandatory / Preferred

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Good to Have

• Microsoft Certified: Security Administrator Associate (SC-200)
• Microsoft 365 Enterprise Administrator Expert
• ITIL Foundation
• AZ-104: Microsoft Azure Administrator

Soft Skills

• Strong leadership and mentoring capabilities.
• Excellent communication and stakeholder management skills.
• Strong troubleshooting, analytical, and problem-solving ability.
• Ability to handle escalations and critical incidents.
• Customer-facing consulting experience with strong ownership and accountability.

Nice to Have

• Knowledge of Microsoft Defender Suite.
• Knowledge of Azure Virtual Desktop (AVD).
• Experience delivering Managed Security Services.