Intune Platform & SME, Design and Build

Role Description 

The Intune Platform SME is responsible for the detailed design, build, configuration, and validation of the Microsoft Intune platform supporting the client environment. The role establishes the core endpoint management platform and implements the policies, profiles, enrolment controls, security configurations, and operational capabilities required to manage Windows endpoints and supported mobile devices. 

Working closely with the Modern Workplace Technical Architect, SOE Engineer, identity and security teams, the role ensures that Intune integrates effectively with Microsoft Entra ID, Windows Autopilot, Microsoft Defender for Endpoint, Conditional Access, and related Microsoft 365 services. The role also provides technical leadership for platform testing, troubleshooting, operational readiness, and handover. 

Key Responsibilities 

• Lead the detailed design and build of the Microsoft Intune platform. 

• Configure device enrolment, platform restrictions, enrolment profiles, and administrative controls. 

• Design and implement Windows Autopilot registration, provisioning, and deployment profiles. 

• Configure device configuration profiles, compliance policies, security baselines, and endpoint security policies. 

• Implement Intune integration with Microsoft Entra ID, Conditional Access, and Microsoft Defender for Endpoint. 

• Configure role-based access control, scope tags, administrative boundaries, and platform governance. 

• Design application deployment, update management, reporting, and endpoint monitoring capabilities. 

• Support the onboarding and management of approved Windows, mobile, and thin-client devices where applicable. 

• Lead platform testing, troubleshooting, defect resolution, and configuration validation. 

• Produce detailed designs, configuration documentation, operational procedures, and handover materials. 

• Provide specialist guidance to SOE, application packaging, security, identity, and deployment teams. 

• Support platform transition to client operational and support teams. 

Key Skills 

• Microsoft Intune architecture, design, and implementation 

• Windows Autopilot and device enrolment 

• Microsoft Entra ID and Conditional Access 

• Microsoft Defender for Endpoint integration 

• Windows 11 endpoint management 

• Intune role-based access control and scope tags 

• Device configuration and compliance policies 

• Endpoint security and Microsoft security baselines 

• Windows Update for Business and Autopatch 

• Application deployment and Win32 application management 

• Mobile Application Management and Mobile Device Management 

• Endpoint Analytics, monitoring, and reporting 

• FIDO2, certificate-based authentication, and device identity 

• PowerShell and Microsoft Graph automation 

• Platform troubleshooting and technical documentation

.

Preferred Experience 

• Designing and implementing Microsoft Intune for large enterprise environments. 

• Delivering Intune and Windows Autopilot solutions in government or highly regulated environments. 

• Integrating Intune with Microsoft Entra ID, Conditional Access, Microsoft Defender for Endpoint, and Microsoft 365 services. 

• Supporting complex device enrolment, rebuild, repurposing, and lifecycle management scenarios. 

• Implementing least-privilege administration, security baselines, compliance controls, and platform governance. 

• Supporting enterprise endpoint transformation programs through design, build, testing, and transition to operations.

You must be an Australian citizen to apply; security clearance is highly regarded

.