Sr Domain\Technical Architect

Job Summary

L1:  This position will lead the design, implementation, governance and continuous improvement of Microsoft Intune and enterprise endpoint management services across corporate, BYOD, co-managed and cloud-native endpoints.  

L2:  The Intune Architect is expected to possess advanced hands-on expertise in Microsoft Intune administration and architecture, endpoint security, Windows Autopilot, application deployment, compliance policy design, Microsoft Graph based automation, DevOps integration and L3/L4 operational support. The role will work closely with workplace engineering, security, infrastructure, application, operations and customer stakeholders to translate requirements into scalable endpoint management standards and controls.

Key Responsibilities

• Design, implement and govern enterprise-scale Microsoft Intune solutions for Windows, macOS, iOS/iPadOS and Android Enterprise devices.  

• Define endpoint management strategy including device enrollment, provisioning, configuration, compliance, security baseline, application  deployment  and lifecycle management standards.  

• Design and govern Windows Autopilot, BYOD, corporate-owned device, unattended  enrollment  and co-management models with SCCM/MECM where applicable.  

• Configure and govern device configuration profiles, compliance policies, Conditional Access policies, App Protection policies, endpoint security  policies  and data protection controls.  

• Design and  optimize  Intune application deployment standards including packaging requirements, assignment models, detection logic, deployment rings, troubleshooting  methods  and rollback practices.  

• Manage and support Windows Update rings, feature updates, Office 365 updates, evergreen  servicing  and Autopatch aligned endpoint compliance improvement.  

• Design and support device configurations including Wi-Fi, VPN, certificate-based authentication, LDAP/Active Directory related dependencies, CA  integration  and  required  Intune console configurations.  

• Build and  maintain  automation frameworks using PowerShell, Microsoft Graph API and other scripting approaches for provisioning, compliance checks, reporting,  remediation  and decommissioning.  

• Develop self-healing and proactive remediation scripts to reduce repetitive operational effort and improve endpoint compliance posture.  

• Implement DevOps practices for endpoint configuration management including Git version control, Azure DevOps/GitHub Actions pipelines and Infrastructure-as-Code approaches such as Terraform or Bicep where suitable.  

• Support Zero Trust endpoint security architecture by defining security baselines, compliance controls, vulnerability remediation  inputs  and monitoring requirements.  

• Provide L3/L4 technical leadership for complex Intune, Autopilot, application deployment, compliance,  enrollment  and Windows provisioning issues, including high-severity P1/P2 scenarios.  

• Create and  maintain  architecture documents, SOPs, technical standards, operational readiness plans, knowledge transfer  artefacts  and governance frameworks.  

• Collaborate with security, infrastructure, application, workplace  engineering  and service operations teams to ensure endpoint services  remain  secure, scalable,  supportable  and aligned to service levels.  

• Mentor engineers and administrators, conduct technical workshops, support upskilling  initiatives  and drive continuous service improvement.  

Skill Requirements

• Strong experience in administration,  architecture  and configuration of Microsoft Intune enterprise environments.  

• Deep knowledge of Microsoft Endpoint Manager, Microsoft Entra ID, Conditional Access, MDM, MAM, Defender for  Endpoint  and endpoint compliance controls.  

• Hands-on experience with Windows Autopilot, Windows 10/11 provisioning, unattended enrollment, device lifecycle  management  and troubleshooting.  

• Expertise  in PowerShell scripting and Microsoft Graph API based automation for Intune management,  reporting  and remediation.  

• Working knowledge of Python, Bash, Azure DevOps, GitHub Actions, Git version  control  and DevOps operating models for endpoint configuration management.  

• Experience with application deployment through Intune, deployment optimization, detection rules, app delivery  troubleshooting  and software distribution governance.  

• Experience with Windows 11 evergreen support, Windows and Office feature updates, update rings, Autopatch concepts, availability, performance  optimization  and reporting.  

• Understanding of  SCCM/MECM co-management, cloud-native endpoint  strategies  and migration from legacy endpoint management platforms such as Workspace ONE to Microsoft Intune.  

• Knowledge of endpoint security baselines, compliance posture management, vulnerability remediation  planning  and integration with tools such as Defender for Endpoint, Qualys, Nexthink, SIEM or equivalent platforms.  

• Ability to manage technical teams and support Intune services either as a technical lead or individual contributor.  

• Experience handling and driving P1/P2 situations from an Intune and Windows device management perspective.  

• Experience in enterprise transformation, operational readiness, release readiness, service recovery, reporting dashboards, AI-assisted automation or Power BI based insights will be an added advantage.  

Other Requirements

• Strong stakeholder management with the ability to lead architecture discussions, technical  workshops  and governance forums.  

• Ability to translate complex technical topics into clear business,  customer  and operational language.  

• Customer-focused approach with demonstrable experience delivering services to defined service levels and improving operational stability.  

• Strong analytical thinking, problem-solving  ability  and capability to drive issues to successful closure.  

• Ability to work effectively in an operational environment alongside technical, security,  application  and infrastructure teams.  

• Initiative-taking mindset with  ability  to learn and apply modern technologies, automation  practices  and endpoint security improvements.  

• Strong written and verbal communication skills, attention to  detail  and self-motivation.  

• Ability to build positive working relationships with customers and internal stakeholders with a focus on consistent service excellence.  

• Ability to mentor, coach and upskill engineers while building reusable  knowledge  assets and operational standards.  

Required Experience:  

• 15+ years of overall experience in Endpoint Management, Workplace Services, IT Infrastructure, Mobility, Modern  Workplace  or related enterprise technology services.  

• 10+ years of hands-on experience with Microsoft Intune and Microsoft Endpoint Management technologies.  

• Experience designing,  implementing  or governing large-scale enterprise endpoint management solutions.  

• Strong understanding of enterprise security, compliance, cloud  transformation  and Microsoft 365 environments.  

• Experience leading modernization or migration initiatives, operational transition, endpoint  governance  or global Windows device management services is preferred.  

Preferred Certifications:  

• Microsoft Certified: Endpoint Administrator Associate (MD-102).  

• Microsoft Certified: Azure Administrator Associate (AZ-104).  

• Microsoft Certified: DevOps Engineer Expert (AZ-400).  

• Microsoft Certified: Enterprise Administrator Expert or Cybersecurity Architect Expert.  

• ITIL Foundation certification will be  advantageous .  

• Azure AI, Security, Compliance and Identity fundamentals certifications will be an added advantage.  

Key Deliverables:  

• Intune Architecture and Governance Framework.  

• Endpoint Security Design and  compliance  baseline standards.  

• Windows Autopilot and device enrollment strategy.  

• Device Compliance and Conditional Access Framework.  

• Application Deployment Standards and  deployment governance model .  

• Automation roadmap for device lifecycle, compliance remediation,  reporting  and operational efficiency.  

• Modern Workplace Transformation Roadmap.  

• SOPs, technical standards, knowledge  transfer  and operational readiness documentation.