Intune Platform & SME, Design and Build

Role Description

The Intune Platform SME is responsible for the detailed design, build, configuration, and validation of the Microsoft Intune platform supporting the client environment. The role establishes the core endpoint management platform and implements the policies, profiles, enrolment controls, security configurations, and operational capabilities required to manage Windows endpoints and supported mobile devices.

Working closely with the Modern Workplace Technical Architect, SOE Engineer, identity and security teams, the role ensures that Intune integrates effectively with Microsoft Entra ID, Windows Autopilot, Microsoft Defender for Endpoint, Conditional Access, and related Microsoft 365 services. The role also provides technical leadership for platform testing, troubleshooting, operational readiness, and handover.

Key Responsibilities

Lead the detailed design and build of the Microsoft Intune platform.

Configure device enrolment, platform restrictions, enrolment profiles, and administrative controls.

Design and implement Windows Autopilot registration, provisioning, and deployment profiles.

Configure device configuration profiles, compliance policies, security baselines, and endpoint security policies.

Implement Intune integration with Microsoft Entra ID, Conditional Access, and Microsoft Defender for Endpoint.

Configure role-based access control, scope tags, administrative boundaries, and platform governance.

Design application deployment, update management, reporting, and endpoint monitoring capabilities.

Support the onboarding and management of approved Windows, mobile, and thin-client devices where applicable.

Lead platform testing, troubleshooting, defect resolution, and configuration validation.

Produce detailed designs, configuration documentation, operational procedures, and handover materials.

Provide specialist guidance to SOE, application packaging, security, identity, and deployment teams.

Support platform transition to client operational and support teams.

Key Skills

Microsoft Intune architecture, design, and implementation

Windows Autopilot and device enrolment

Microsoft Entra ID and Conditional Access

Microsoft Defender for Endpoint integration

Windows 11 endpoint management

Intune role-based access control and scope tags

Device configuration and compliance policies

Endpoint security and Microsoft security baselines

Windows Update for Business and Autopatch

Application deployment and Win32 application management

Mobile Application Management and Mobile Device Management

Endpoint Analytics, monitoring, and reporting

FIDO2, certificate-based authentication, and device identity

PowerShell and Microsoft Graph automation

Platform troubleshooting and technical documentation

.

Preferred Experience

Designing and implementing Microsoft Intune for large enterprise environments.

Delivering Intune and Windows Autopilot solutions in government or highly regulated environments.

Integrating Intune with Microsoft Entra ID, Conditional Access, Microsoft Defender for Endpoint, and Microsoft 365 services.

Supporting complex device enrolment, rebuild, repurposing, and lifecycle management scenarios.

Implementing least-privilege administration, security baselines, compliance controls, and platform governance.

Supporting enterprise endpoint transformation programs through design, build, testing, and transition to operations.

You must be an Australian citizen to apply; security clearance is highly regarded

.