Network Admin/Engineer

**L3 Endpoint Device Management (EDM) – SCCM &

Intune Engineer** Job Summary We are seeking a highly experienced **L3 Endpoint

Device Management (EDM) Engineer/Architect** responsible for the design,

architecture, automation, security, and lifecycle management of enterprise

endpoint platforms. The role will provide technical leadership for Microsoft

Intune, SCCM (MECM), Windows Enterprise platforms, endpoint security, application

delivery, and hybrid device management initiatives. The candidate will drive

platform strategy, technical standards, automation, and modernization efforts

while supporting large-scale enterprise environments.

Key Responsibilities

• Lead the architecture, design, and governance of enterprise endpoint management platforms including Microsoft Intune and SCCM (MECM).
• Define endpoint lifecycle management standards covering provisioning, imaging, software deployment, patch management, compliance, and retirement processes.
• Design and implement modern endpoint management solutions leveraging Intune, Autopilot, Co-Management, and Cloud Attach.
• Develop and maintain enterprise automation frameworks using PowerShell.
• Lead operating system deployment (OSD), application packaging, software distribution, and patch management strategies.
• Architect endpoint security solutions using Microsoft Defender for Endpoint, Microsoft Certificate Authority, and security baselines.
• Design and manage hybrid endpoint environments integrating Active Directory, Microsoft Entra ID, Azure Arc, SCCM, and Intune.
• Provide technical leadership for vulnerability remediation programs in partnership with security teams using Tenable.io and Zafran.
• Establish monitoring, reporting, compliance, and endpoint health dashboards.
• Support enterprise desktop virtualization platforms including Citrix Virtual Apps and Desktops.
• Drive root cause analysis and resolution of complex endpoint and infrastructure issues.
• Define operational standards, SOPs, governance controls, and best practices.
• Lead major endpoint transformation initiatives, platform upgrades, migrations, and modernization programs.
• Provide L3 escalation support for critical incidents and complex technical issues.

Technical Skills Endpoint Management Platforms

• Microsoft Intune
• Microsoft Endpoint Configuration Manager (SCCM/MECM)
• Windows Autopilot
• Co-Management
• Cloud Attach
• Windows Update for Business (WUfB)
• Endpoint Analytics

Operating Systems & Endpoint Platforms

• Windows 10/11 Enterprise
• Dell Endpoint Management
• Lenovo Commercial Device Management
• Device Lifecycle Management
• Driver & Firmware Management

Automation & Scripting

• PowerShell Automation
• Task Sequence Automation
• Endpoint Provisioning Automation
• Configuration Baseline Automation

Security & Compliance

• Microsoft Defender for Endpoint
• Microsoft Certificate Authority (PKI)
• Endpoint Security Baselines
• Conditional Access Integration
• Device Compliance Policies
• BitLocker Administration
• Vulnerability Remediation

Identity & Hybrid Management

• Microsoft Entra ID (Azure AD)
• Active Directory
• Azure Arc
• Hybrid Join
• Group Policy Management

Server & Core Infrastructure Services

• DNS
• DHCP
• SMB/File Services
• Print Services
• IIS Administration

Virtualization & VDI

• Citrix Virtual Apps & Desktops
• Citrix XenServer
• Application Virtualization
• Profile Management

Vulnerability & Risk Management

• Tenable.io
• Zafran
• Security Patch Management
• Risk-Based Vulnerability Prioritization

Monitoring & Reporting

• SCCM Reporting
• Intune Reporting
• Power BI (Preferred)
• Endpoint Compliance Reporting
• Patch Compliance Dashboards

Preferred Experience

• 7+ years of experience supporting enterprise endpoint management platforms.
• 5+ years of experience administering SCCM and Intune environments.
• Experience managing 10,000+ endpoints in global enterprise environments.
• Experience with endpoint modernization and migration projects.
• Experience supporting manufacturing, healthcare, retail, or large enterprise environments.
• Experience working within ITIL-based operational environments.