Infrastructure Engineer

Description : Role : Infrastructure Ops Engineer (Intune/SCCM and Windows)Location : Bengaluru, Karnataka 560103, India (Hybrid onsite 2 days)Duration : 6 months CTH (Contract-to-Hire)Job Description : Endpoint Management Architecture and Operations : - Lead the administration, maintenance, and operational support of the enterprise-level Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune infrastructure.- Provide Level 3 (L3) support and in-depth troubleshooting for complex incidents related to endpoint configurations, software deployment failures, patch management issues, and client health across a large-scale global environment.- Implement and manage Co-management strategies between SCCM and Intune, leveraging the benefits of both on-premises and modern cloud management functionalities.- Configure, deploy, and manage endpoint security policies, compliance baselines, and conditional access policies using Intune and Microsoft Entra ID (Azure AD).- Monitor the health, performance, and capacity of the SCCM site servers, distribution points, and the Intune service, performing necessary optimization and remediation.Operating System and Application Deployment : - Design, build, and maintain the Standard Operating Environment (SOE) and Gold Images for Windows 10/11 using Operating System Deployment (OSD) via SCCM Task Sequences and Windows Autopilot via Intune.- Manage the full lifecycle of application deployment, including packaging, testing, quality assurance, and distribution using SCCM and Intune to various device groups and user collections.- Develop and maintain automated software packaging, updates, and configuration scripts using PowerShell and other relevant scripting languages (VBScript, Batch) to streamline and industrialize deployment processes.- Manage the deployment of Microsoft 365 applications and services, ensuring proper integration and configuration with the modern workplace environment.Patch Management and Security Compliance : - Own the end-to-end patch management process for Microsoft operating systems (OS) and third-party applications using SCCM (WSUS) and Intune, ensuring timely deployment and high compliance rates across the endpoint fleet.- Collaborate with the Security teams to promptly address critical vulnerabilities by implementing emergency patching and configuration changes on endpoints.- Develop and automate compliance reporting dashboards using SCCM and Intune reporting tools to provide visibility into endpoint health, security posture, and patching status.- Implement and manage disk encryption solutions such as BitLocker via Intune/SCCM policies, including key recovery and local administrative password solutions (LAPS).Automation, Documentation, and Process Improvement : - Drive automation initiatives to reduce manual efforts in endpoint management, troubleshooting, and daily operational tasks.- Create and maintain detailed technical documentation, Standard Operating Procedures (SOPs), and knowledge base articles for L1/L2 support teams and new processes.- Lead change management activities, ensuring all infrastructure changes are thoroughly tested, documented, and approved following ITIL standards before deployment to the production environment.- Participate in capacity planning, road mapping, and evaluation of new End User Computing (EUC) technologies to continually enhance the user experience and service delivery.Preferred Skills : Certifications : - Microsoft Certified : Endpoint Administrator Associate (MD-102), ITIL v4 Foundation.Scripting Mastery : - Advanced proficiency in PowerShell for deep-level automation, infrastructure maintenance, and complex troubleshooting.Directory Services : - In-depth knowledge of Active Directory (AD), Group Policy Objects (GPOs), and their seamless integration with Microsoft Entra ID (Azure AD) and Intune.Network & Security : - Strong understanding of networking concepts (TCP/IP, DNS, DHCP), firewall rules, and endpoint protection solutions (e.g., Microsoft Defender for Endpoint).Cloud EUC : - Experience with Azure Virtual Desktop (AVD) or other Virtual Desktop Infrastructure (VDI) solutions.ITSM Tools : - Proven experience working with enterprise IT Service Management (ITSM) platforms such as ServiceNow for incident, problem, and change management.Vendor Management : - Prior experience in coordinating with Microsoft Premier Support and other third-party vendors for critical incident resolution and strategic input. (ref:hirist.tech)