SOE Engineer (Intune & Security Policies)

About the role

The SOE Engineer designs, builds, configures and validates the Windows 11 Standard Operating Environment (SOE) in the client environment. The role covers Microsoft Intune, Windows Autopilot, security baselines, compliance policies, device configuration, application deployment and endpoint security controls so that devices meet client operational and security requirements. It works closely with architects, security specialists and deployment teams to support endpoint onboarding and consistent SOE deployment across the EUC fleet.

Key responsibilities

• Design, build and maintain the Windows 11 SOE.
• Configure Microsoft Intune device management policies and profiles.
• Implement Windows Autopilot provisioning and enrolment.
• Deploy and manage security baselines, compliance policies and endpoint protection controls.
• Configure conditional access dependencies and device compliance integrations.
• Package, deploy and manage applications through Microsoft Intune.
• Support device provisioning, rebuild and onboarding, and validate endpoint compliance.
• Develop SOE documentation, build procedures and operational guidance.
• Support testing, pilot deployments and transition to operations.

Required profile

• Australian citizenship is required to apply; security clearance is highly regarded.
• Preferred: experience with Intune and endpoint management implementations, Windows 11 SOE design and deployment, Windows Autopilot rollouts, Microsoft Defender for Endpoint, government or highly regulated environments, and migration from traditional endpoint management platforms to Microsoft Intune.

Required skills

• Microsoft Intune, Windows 11 administration and Windows Autopilot
• Microsoft Entra ID, Device Compliance Policies and Configuration Profiles
• Security baselines, Microsoft Defender for Endpoint and Conditional Access integration
• Application packaging and deployment, Win32 application management, Endpoint Analytics
• PowerShell automation and endpoint troubleshooting and support