Senior Digital Workplace Engineer

Job highlights

• You will ensure the organization\u2019s device ecosystem is secure,scalable,and modern,while enabling employees with a seamless digital experience
• . Certified in MDM administration (Intune,Jamf) or equivalent
• Experience with application control / allowlisting technologies (WDAC,AppLocker,Intune App Control)
• Willingness to mentor and upskill peers within the engineering team

":"

As a Senior Digital Workplace Engineer, you will be responsible for leading technical strategy and operations for digital workplace technology, with a primary focus on Microsoft Intune and Mac MDM solutions. You will ensure the organization\u2019s device ecosystem is secure, scalable, and modern, while enabling employees with a seamless digital experience.

This role involves technical leadership, architecture, and hands-on expertise while mentoring team members and collaborating across security, engineering, and business teams to drive impactful solutions.

**Key Responsibilities

• Lead the administration, configuration, and optimization of Microsoft Intune across Windows, macOS, iOS, and Android devices.

• Develop and enforce policies for device enrollment, compliance, security baselines, and configuration profiles.

• Monitor endpoint health, security posture, and compliance, proactively resolving issues.

• Integrate Intune with Microsoft 365, Azure, and Entra ID (Azure AD) to implement Conditional Access, dynamic groups, and identity protections.

• Automate Intune administrative tasks using PowerShell and Microsoft Graph API, creating scripts and workflows for efficiency.

• Design and manage Windows Autopilot, Apple Automated Device Enrollment (ADE via ABM/ASM), Android Enterprise, and application deployment strategies (Win32, LOB, Store).

• Implement BYOD strategies leveraging MDM and MAM controls to ensure data protection.

• Manage OS updates and patching strategies across all supported platforms.

• Apply Zero Trust security principles, CIS benchmarks, and compliance standards (ISO 27001, SOC 2) within the endpoint environment.

• Lead and contribute to migration projects (e.g., SCCM, Workspace ONE, Jamf to Intune).

• Collaborate with Technology, Security, Finance, and Procurement to assess build vs. buy solutions and integrations.

• Provide technical mentorship to the engineering team, contributing to solution design and knowledge sharing.

  **Requirements:

  Experience & Certifications:

  • 6+ years of experience in MDM and Endpoint Management, with 5+ years dedicated to Microsoft Intune administration.

  • Deep, demonstrable expertise in Windows, macOS, Android, and iOS device lifecycle management.

  • Certified in MDM administration (Intune, Jamf) or equivalent.

  • Experience in migrating device fleets between MDM solutions (e.g., SCCM, Workspace ONE, Jamf).

    Technical Expertise:

    • Proficient in PowerShell scripting and Microsoft Graph API for automation and reporting.

    • Strong knowledge of Microsoft Entra ID (Azure AD), including SSO (SAML/OIDC), SCIM provisioning, and Conditional Access.

    • Familiar with Microsoft Defender for Endpoint and enterprise browser management (Microsoft Edge, Firefox, etc.).

    • Understanding of Zero Trust frameworks and compliance standards (CIS, ISO 27001, SOC 2).

    • Experience with application control/allowlisting technologies (WDAC, AppLocker, Intune App Control).

      Soft Skills & Approach:

      • Excellent problem-solving and collaboration skills, working seamlessly with technical and non-technical teams.

      • Strong documentation and communication skills for stakeholder alignment.

      • Proactive mindset with the ability to balance security with usability.

      • Willingness to mentor and upskill peers within the engineering team.

        ","Experience":null,"****