MDM Intune expert

Job Description The role focuses on leading and managing enterprise-grade mobile device management (MDM) deployments using Microsoft Intune across diverse models such as COBO, COPE, BYOD, and MAM-WE. It involves designing, enforcing, and enhancing MDM configurations for iOS and Android platforms, ensuring seamless integration of mobile security tools like Lookout for Work, Zscaler ZPA, and Microsoft Defender for Endpoint. A key objective is to define and enforce app protection policies, device compliance, configuration profiles, and conditional access across platforms. Implementing security measures like Always-On VPN, app data containerization, and supervision-restricted controls aligned with CIS benchmarks and GDPR is crucial. The role requires acting as the primary liaison with key OEMs/ISVs such as Microsoft, Apple, and Samsung for escalations, feature enablement, and strategic roadmap alignment. It involves driving vendor engagement roadmaps, contributing to enterprise partner programs, and supporting migration strategies across MDM platforms. Automation and reporting are central to the role, utilizing Microsoft Graph API, PowerShell, and Intune Data Warehouse for task automation and reporting. Managing configuration-as-code and automation pipelines using Azure DevOps, GitHub, or Jenkins, while maintaining documentation in Confluence and tracking tasks via Jira, is essential. Collaboration with cybersecurity, compliance, and network teams to enforce secure mobile practices is vital, alongside governance of platform integrations with a focus on change control, audit readiness, and business continuity. Required experience includes extensive expertise in Microsoft Intune, scripting, automation, and operational tracking platforms, with preferred certification as a Microsoft Certified: Endpoint Administrator Associate (MD-102). 100% PART 3 Qualification & Experience - 7+ years of hands-on enterprise experience managing mobile devices via Microsoft Intune (Endpoint Manager). - Deep technical expertise in: o Apple Business Manager (ABM) & VPP o Samsung Knox Mobile Enrollment (KME) o Google Zero Touch Enrollment (ZTE) o Apple Supervised Mode, Configurator, and DEP - Strong familiarity with: o App Protection Policies (MAM) o Conditional Access via Entra ID (Azure AD) o Android Enterprise Fully Managed / COPE profiles - Track record of vendor engagement and roadmap contribution with Microsoft and Apple. - Skilled in scripting and automation via PowerShell and Graph API. - Familiarity with Confluence, Jira, and ServiceNow or similar platforms for operational tracking. - Exposure to Workspace ONE (WS1), Jamf Pro, or similar platforms is a strong plus. - CI/CD and DevOps tool experience (GitHub, Azure DevOps, Jenkins) is desirable. Basic AI Understanding is mandatory Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us. Let's care for tomorrow.