SOE/Infrastructure Engineer

Security clearance
Must have Negative Vetting Level 1

Job details

• Ensuring requestable software applications and hardware drivers on the Windows 11 devices are maintained at a supported version and patched using the Microsoft Intune endpoint management solution.
• Documentation, configuration of Intune App deployment packaging (Win32 and MSIX) and lifecycle management
• Troubleshooting application authentication and solution development as part of a transition of hybrid joined Windows 11 devices to an Entra joined Windows 11 SOE with Passwordless Experience.
• Prepare written communications and materials such as knowledge base articles and technical instructional documents.
• Review of Windows 11 hybrid and cloud joined device configuration and compliance policies.

This role will support department delivery of projects, initiatives and working alongside a vendor.

Key duties and responsibilities

• Package, test and deploy applications using Microsoft Intune (Win32 and MSIX).
• Configure and administer Intune device management and endpoint configuration policies.
• Review SCCM/MECM operating system deployment task sequences and enhance Windows Autopilot automation processes.
• Implement and support application control, endpoint security controls and SOE compliance requirements.
• Develop PowerShell scripts to automate deployment, configuration and operational support activities.
• Produce technical documentation, knowledge articles, support procedures and implementation guides.
• Provide Level 3 technical support for SOE, application packaging and endpoint management services.
• Work collaboratively with project, infrastructure, cyber security and service providers to deliver desktop outcomes.
• Support release, change and incident management processes associated application deployments.
• Understanding of technical release and incident management
• Working understanding of Entra ID, Entra Kerberos authentication, Active Directory and Configuration Profiles from hybrid and cloud device perspective, with on-premises accessed resources.
• Endpoint security, compliance and desktop hardening.

Technical skills

• Strong experience with Intune App deployment packaging (Win32 and MSIX) and lifecycle management
• Microsoft Intune (Endpoint Manager) administration, configuration and compliance policies.
• Intune Autopilot deployment and device provisioning.
• SCCM/MECM operating system deployment and task sequence administration.
• Application control technologies such as AirLock and WDAC.
• Experience in PowerShell Scripting
• Strong technical writing and change management (raising changes)

Essential criteria

Weighting

• Extensive experience in Win32 and MSIX apps packaging, updating and deploying modern cloud-based Windows platforms, specifically Intune Windows 11 devices.
• Experience with developing, configuring, supporting, managing and troubleshooting Intune configuration for hybrid and cloud joined Windows 11 devices.
• Experience configuring and supporting Microsoft endpoint services in cloud and hybrid environments such as Windows Desktop SOE, Intune, SCCM/MECM, Entra, DNS, DHCP and Always-On VPN.
• Skill in preparing written communications and materials such as knowledge base articles and technical instructional documents.
• Demonstrated experience in development of design, architecture, and as-built configuration documentation.

Desirable criteria

• Experience in Intune configuration and management of supervised apple iOS mobile devices, including mobile application deployment.
• Experience transitioning from traditional SCCM-dependent environments to modern management and full Autopilot deployments.

To be considered for the role click the 'apply' button or for more information about this and other opportunities please contact Muhammad Warsi on (0)2 6151 92012 6151 9201) or email: [email protected] and quote the above job reference number.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.