Senior Digital Workplace Engineer

Role
We are seeking a highly skilled Senior Digital Workplace Engineer to lead the technical strategy and operations for digital workplace technology, with a primary focus on Windows and macOS MDMs as an Intune expert. This role involves delivering a modern, secure, and scalable digital workplace, ensuring enterprise-grade endpoint management across multiple platforms, and mentoring a team of specialists to solve complex workplace technology :

• Build a deep understanding of internal stakeholder needs and translate them into effective solutions.
• Lead technical standards within the Digital Workplace in alignment with security and architecture frameworks.
• Contribute to roadmap and architecture design for internal tooling across the full digital workplace lifecycle.
• Identify solutions to technical problems, balancing effort and impact across stakeholders.
• Collaborate with technical, finance, and procurement teams for build vs. buy recommendations.
• Design and manage the integration of applications into the digital workplace experience.
• Deliver and continuously improve a secure, scalable, and modern device management system.
• Provide technical mentorship and foster collaborative problem-solving within the team.

Core Technical Expertise
Advanced Intune & Endpoint Management :

• Lead the administration, configuration, and optimization of Microsoft Intune.
• Develop and manage device enrollment, configuration profiles, compliance, and security baselines across Windows, macOS, iOS, and Android.
• Monitor health, compliance, and security posture of endpoints.
• Integrate Intune with Microsoft 365 and Azure services.

Intune Automation & Scripting

• Use Microsoft Graph API and PowerShell to automate tasks, deploy policies, and generate reports.
• Build custom workflows to enhance endpoint management efficiency.

Azure Ecosystem Integration

• Strong understanding of Microsoft Entra ID (Azure AD) and its integration with Intune.
• Implement Conditional Access, dynamic groups, and identity protection in endpoint security policies.

Advanced Intune Features

• Expertise in Windows Autopilot, Apple ADE (ABM/ASM), Android Enterprise, and Application Protection Policies (MAM).
• Manage application deployments (Win32 LOB, Store) and integrate with Microsoft Defender for Device Lifecycle Management :
• Design and manage BYOD strategies with Intune MDM and MAM controls.
• Oversee OS updates and patching across platforms.

Enterprise Browser Management

• Configure security-focused browser policies via Intune for Edge, Firefox, etc., including DLP settings.

Cloud Identity & Access Management

• Scale identity and access management using Entra ID with Intune.
• Configure SSO (SAML/OIDC) and SCIM provisioning for application & Compliance :
• Apply Zero Trust principles and compliance frameworks (ISO 27001 SOC 2 Cyber Essentials) to endpoint management.
• Conduct security assessments and contribute to risk remediation efforts.

Architecture & Design

• Design secure, scalable endpoint management solutions integrated with IDPs (Okta, Entra ID).
• Translate business requirements into effective technical solutions.

Desirable Additional Experience

• Identity and Access Management (IAM) & Privileged Access Management (PAM) platforms, preferably Okta.
• Application allowlisting (App Control, WDAC, AppLocker).
• Workflow and process automation.
• Issue & Project tracking tools :
• 5+ years in MDM & Endpoint Management, including 5+ years as Intune Administrator.
• Proven expertise in Intune administration, policy configuration, and troubleshooting.
• Experience managing Windows, macOS, Android, and iOS endpoints in enterprise environments.
• Strong PowerShell scripting and Microsoft Graph API skills.
• Certification in MDM administration (Intune, Jamf).
• Experience with MDM migration (e. g., Workspace ONE, Jamf, SCCM).
• Strong communication, collaboration, and mentoring skills.

)