Intune Platform & SME, Design and Build

About the role

The Intune Platform SME is responsible for the detailed design, build, configuration and validation of the Microsoft Intune platform supporting the client environment. It establishes the core endpoint management platform and implements the policies, profiles, enrolment controls, security configurations and operational capabilities needed to manage Windows endpoints and supported mobile devices. The role works closely with the Modern Workplace Technical Architect, SOE Engineer, identity and security teams, and provides technical leadership for testing, troubleshooting, operational readiness and handover.

Key responsibilities

• Lead the detailed design and build of the Microsoft Intune platform.
• Configure device enrolment, platform restrictions, enrolment profiles and administrative controls.
• Design and implement Windows Autopilot registration, provisioning and deployment profiles.
• Configure device configuration profiles, compliance policies, security baselines and endpoint security policies.
• Implement Intune integration with Microsoft Entra ID, Conditional Access and Microsoft Defender for Endpoint.
• Configure role-based access control, scope tags, administrative boundaries and platform governance.
• Design application deployment, update management, reporting and endpoint monitoring capabilities.
• Support onboarding and management of approved Windows, mobile and thin-client devices where applicable.
• Lead platform testing, troubleshooting, defect resolution and configuration validation.
• Produce detailed designs, configuration documentation, operational procedures and handover materials.
• Provide specialist guidance to SOE, application packaging, security, identity and deployment teams, and support the transition to client operational and support teams.

Required profile

• Australian citizenship is required to apply; security clearance is highly regarded.
• Preferred: designing and implementing Intune for large enterprise environments, including government or highly regulated environments.
• Preferred: experience with complex device enrolment, rebuild, repurposing and lifecycle management, and with least-privilege administration, security baselines, compliance controls and platform governance.

Required skills

• Microsoft Intune architecture, design and implementation
• Windows Autopilot and device enrolment
• Microsoft Entra ID and Conditional Access
• Microsoft Defender for Endpoint integration
• Windows 11 endpoint management
• Intune role-based access control and scope tags
• Device configuration and compliance policies, endpoint security and security baselines
• Windows Update for Business and Autopatch
• Application deployment, Win32 application management, MAM and MDM
• Endpoint analytics, monitoring and reporting
• FIDO2, certificate-based authentication and device identity
• PowerShell and Microsoft Graph automation
• Platform troubleshooting and technical documentation