Senior InTune administrator required to rollout and support Intune, End-to-End

Our Concord based Client requires the services of a Senior InTune administrator to rollout and support Intune, End-to-End (6 month contract with chance of extension).

ROLE:

Seeking an Intune administrator with SIGNIFICANT experience rolling out and supporting Intune end to end - hopefully with some big deploys under their belt. Experience managing the rest of the Entra ID / Directory Services / M365 / etc Microsoft stack would be a huge bonus. This role will work directly with Client's internal team to deploy and support all Intune features that the Client wants to take advantage of, with the goal to have the project complete to production and the internal team self sufficient within that 6 months period.

DUTIES:

1. Conditional Access Policies: Configuring policies that control access to resources based on device compliance and user conditions.

2. Compliance Policies: Creating and managing compliance policies to ensure devices meet organizational standards.

3. Application Protection Policies: Implementing policies to protect corporate data within mobile apps.

4. Windows Autopilot: Setting up and configuring Windows Autopilot for device provisioning.

5. Windows App Deployment: Managing the deployment of applications to devices, including line-of-business apps.

6. Role-Based Access Control (RBAC): Setting up RBAC to control who can perform various Intune tasks.

7. SCCM: Manage the health and capability of our SCCM environment, migrate features and functionality away from SCCM to Intune wherever possible

8. Group Policy Migration: Manage desktop/endpoint group policy elements, audit and improve them regularly, seek to migrate any and all legacy GPO’s to Intune

9. Integration with Azure AD: Integrating Intune with Azure Active Directory for identity and access management. Configure Windows endpoints as Trusted endpoints in the environment.

10. Reporting and Analytics: Configuring and interpreting Intune reports and analytics for device and app management.

11. Network Configuration: Setting up VPN, Wi-Fi, and certificate profiles for secure network access. Manage SCEP integration between Intune and our internal CA

12. Co-management with Configuration Manager: Integrating Intune with Configuration Manager for co-management of devices.

13. Endpoint Privilege Management: Managing user privileges on endpoints to enhance security.

14. Mobile Threat Defense: Integrating with mobile threat defense solutions to protect against mobile threats.

15. Zero Trust Security Model: Implementing a Zero Trust security model using Intune and other security tools such as Duo.

16. Passwordless authentication: Work with the security team to implement passwordless authentication on endpoints using Intune and other security tools

17. Data Loss Prevention (DLP): Configuring DLP policies to protect sensitive information.

18. Custom Scripts: Deploying custom PowerShell scripts for advanced device management tasks.