Job Summary
Intune Modern Management Engineer (L2)
Key Responsibilities
Microsoft Intune Administration Administer and support Microsoft Intune environments. Manage device enrollment, device groups, assignment groups, configuration profiles, compliance policies, device restrictions. Troubleshoot Intune policy deployment issues. Monitor platform health and daily operational activities. Device Enrollment & Provisioning Support Windows device enrollment into Intune across Entra Joined and Hybrid Joined devices, Autopilot enrollment, and device provisioning. Troubleshoot enrollment failures and provisioning issues; support zero-touch deployment processes. Windows Autopilot Support Support Windows Autopilot deployment activities; troubleshoot Enrollment Status Page (ESP) failures, profile assignment issues, device registration failures, and deployment errors. Assist with user-driven and pre-provisioned deployments; support device onboarding activities. Application Management Deploy and manage applications through Microsoft Intune, including Microsoft 365 Apps, Microsoft Store Apps, Win32 Applications, and Enterprise Applications. Troubleshoot application deployment failures and monitor successful installations. Support Company Portal application availability. Windows Update for Business & Autopatch Support Monitor Windows Update for Business deployments; support update ring administration. Assist with Quality Updates, Feature Updates, Driver Updates, and Autopatch Deployments. Troubleshoot update installation failures; monitor update compliance reports. Compliance & Endpoint Security Support compliance policy administration; monitor non-compliant devices. Assist with BitLocker policies, Microsoft Defender policies, security baselines, device restrictions, and endpoint security policies. Escalate security-related issues to L3 teams where required; support audit and compliance initiatives. Identity & Access Support Support Microsoft Entra ID device registration; troubleshoot device join, registration, and Conditional Access-related access problems. Support MFA and device compliance validation; coordinate with identity teams when required. Incident & Request Management Resolve L2 incidents and service requests related to Intune, Autopilot, Application Deployments, Compliance Issues, Device Enrollment, and Update Failures. Perform troubleshooting and root cause investigations; escalate complex technical issues to L3 engineers. Maintain SLA commitments. Reporting & Monitoring Monitor device compliance, enrollment statistics, application deployment status, update compliance, and operational health. Generate operational reports and dashboards; participate in governance and service review meetings. Documentation & Knowledge Management Create and maintain SOPs, runbooks, knowledge articles, and troubleshooting guides. Maintain operational documentation; support audit evidence preparation.
Skill Requirements
Modern Device Management Microsoft Intune Administration Device Enrollment Device Compliance Policies Configuration Profiles Security Policies Device Restrictions Endpoint Management Windows Modern Management Windows 10 / 11 Administration Windows Autopilot Windows Update for Business (WUfB) Windows Autopatch Device Provisioning Endpoint Lifecycle Management Application Management Microsoft 365 Apps Company Portal Win32 App Deployment Microsoft Store Apps Application Assignment & Troubleshooting Base Software / On-Demand Software Governance Model Security & Identity Microsoft Entra ID Conditional Access Fundamentals BitLocker Microsoft Defender Fundamentals Endpoint Security Policies Compliance Monitoring Client Environment Awareness Device Product-Line Awareness: Modern Office Device, SW Developer Device, Privileged Access Workstation (PAW), DevBoxes, GEW Basic Alice (IAM / RBAC Governance Tool) — working knowledge for logging role-change requests ITSM & Operations ServiceNow Incident Management Request Fulfilment Change Management Problem Management Knowledge Management
Other Requirements
SCCM Co-Management Awareness Cloud Attach Awareness PowerShell Basics Microsoft Graph Fundamentals Endpoint Analytics Windows Security Baselines Delivery Optimization Patch Management Concepts Defender for Endpoint Awareness Power BI Reporting German Language (B2) — preferred for DACH-region support rotations (confirm with account team) Educational Qualification Bachelor’s degree in computer science, Information Technology, Engineering, or equivalent. Preferred Certifications Microsoft Certifications Microsoft Certified: Endpoint Administrator Associate (MD-102) Microsoft 365 Fundamentals (MS-900) Microsoft Security Fundamentals (SC-900) Service Management ITIL Foundation Certification