L3 Endpoint Device Management (EDM) – SCCM &
Intune Engineer
Job Summary
We are seeking a highly experienced
L3 Endpoint
Device Management (EDM) Engineer/Architect responsible for the design,
architecture, automation, security, and lifecycle management of enterprise
endpoint platforms. The role will provide technical leadership for Microsoft
Intune, SCCM (MECM), Windows Enterprise platforms, endpoint security, application
delivery, and hybrid device management initiatives. The candidate will drive
platform strategy, technical standards, automation, and modernization efforts
while supporting large-scale enterprise environments.
Key Responsibilities
- Lead the architecture, design, and governance of enterprise endpoint management platforms including Microsoft Intune and SCCM (MECM).
- Define endpoint lifecycle management standards covering provisioning, imaging, software deployment, patch management, compliance, and retirement processes.
- Design and implement modern endpoint management solutions leveraging Intune, Autopilot, Co-Management, and Cloud Attach.
- Develop and maintain enterprise automation frameworks using PowerShell.
- Lead operating system deployment (OSD), application packaging, software distribution, and patch management strategies.
- Architect endpoint security solutions using Microsoft Defender for Endpoint, Microsoft Certificate Authority, and security baselines.
- Design and manage hybrid endpoint environments integrating Active Directory, Microsoft Entra ID, Azure Arc, SCCM, and Intune.
- Provide technical leadership for vulnerability remediation programs in partnership with security teams using Tenable.io and Zafran.
- Establish monitoring, reporting, compliance, and endpoint health dashboards.
- Support enterprise desktop virtualization platforms including Citrix Virtual Apps and Desktops.
- Drive root cause analysis and resolution of complex endpoint and infrastructure issues.
- Define operational standards, SOPs, governance controls, and best practices.
- Lead major endpoint transformation initiatives, platform upgrades, migrations, and modernization programs.
- Provide L3 escalation support for critical incidents and complex technical issues.
Technical Skills
Endpoint Management Platforms
- Microsoft Intune
- Microsoft Endpoint Configuration Manager (SCCM/MECM)
- Windows Autopilot
- Co-Management
- Cloud Attach
- Windows Update for Business (WUfB)
- Endpoint Analytics
Operating Systems & Endpoint Platforms
- Windows 10/11 Enterprise
- Dell Endpoint Management
- Lenovo Commercial Device Management
- Device Lifecycle Management
- Driver & Firmware Management
Automation & Scripting
- PowerShell Automation
- Task Sequence Automation
- Endpoint Provisioning Automation
- Configuration Baseline Automation
Security & Compliance
- Microsoft Defender for Endpoint
- Microsoft Certificate Authority (PKI)
- Endpoint Security Baselines
- Conditional Access Integration
- Device Compliance Policies
- BitLocker Administration
- Vulnerability Remediation
Identity & Hybrid Management
- Microsoft Entra ID (Azure AD)
- Active Directory
- Azure Arc
- Hybrid Join
- Group Policy Management
Server & Core Infrastructure Services
- DNS
- DHCP
- SMB/File Services
- Print Services
- IIS Administration
Virtualization & VDI
- Citrix Virtual Apps & Desktops
- Citrix XenServer
- Application Virtualization
- Profile Management
Vulnerability & Risk Management
- Tenable.io
- Zafran
- Security Patch Management
- Risk-Based Vulnerability Prioritization
Monitoring & Reporting
- SCCM Reporting
- Intune Reporting
- Power BI (Preferred)
- Endpoint Compliance Reporting
- Patch Compliance Dashboards
Preferred Experience
- 7+ years of experience supporting enterprise endpoint management platforms.
- 5+ years of experience administering SCCM and Intune environments.
- Experience managing 10,000+ endpoints in global enterprise environments.
- Experience with endpoint modernization and migration projects.
- Experience supporting manufacturing, healthcare, retail, or large enterprise environments.
- Experience working within ITIL-based operational environments.
