Senior Intune Platform Engineer

As a Senior Intune Platform Engineer,you are ultimately responsible for the technical design, standardization, andfurther professionalization of Microsoft Intune within the organization. Youensure endpoints are securely, consistently, and manageably configured,maintained, and continuously improved.

You are responsible for the setup andgovernance of device enrollment, configuration profiles, compliance policies,security baselines, application management, Company Portal, Intune Suite,Endpoint Privilege Management, and related endpoint security processes.

In this senior role, you define not onlyhow Intune is technically configured, but also how it is managed across theorganization. You establish standards, processes, and guidelines for other ITteams, including how changes are assessed, how exceptions are handled, whichsecurity requirements apply, and how applications, policies, and configurationsare deployed in a controlled manner.

You work closely with Security,Infrastructure, Desktop Services, Servicedesk, Application Management, and ITmanagement. You act as a key sparring partner for technical decisions, riskassessments, governance topics, and strategic improvements within modernworkplace and endpoint management.

You also play an important role inknowledge retention and maturity growth, ensuring knowledge is notperson-dependent but translated into maintainable standards, documentation,working instructions, and transferable processes.

Key Responsibilities

1. Platform Ownership Microsoft Intune

• Act as the technical owner ofthe Microsoft Intune platform
  
• Define the technical directionand architecture of Intune
  
• Manage and develop deviceenrollment, configuration profiles, compliance policies, security baselines,and application management
  
• Ensure a stable, secure, andscalable Intune environment
  
• Identify risks, technical debt,management complexity, and improvement opportunities
  
• Translate strategic IT andsecurity objectives into concrete Intune configurations
  
• Ensure consistency acrossdevice types, user groups, countries, divisions, and business units
  

2. Governance and Framework Definition

• Define and govern endpointmanagement frameworksEstablish organization-widestandards for configurations, policies, compliance, application deployment, andexceptions
  
• Define processes and agreementsfor IT teams
  
• Document roles,responsibilities, and authorities
  
• Set up change, review, andapproval processes
  
• Assess deviations and exceptionrequests based on risk, manageability, and security impact
  
• Ensure changes arereproducible, controlled, documented, and aligned with standards
  
• Act as content owner ofIntune-related management processes
  

3. Security, Compliance, and Risk Management

•  Translate security policiesinto endpoint configurations and standards
  
• Implement and optimize securitybaselines, compliance policies, and endpoint security settings
  
• Ensure devices meet securityand compliance requirements
  
• Reduce local administratorprivileges using Endpoint Privilege Management or similar solutions
  
• Identify and mitigate securityrisks
  
• Collaborate with Security onrisk analysis, audits, vulnerability management, and compliance
  
• Advise on security withinIntune Suite, Microsoft Defender for Endpoint, and Microsoft Entra ID
  
• Balance security, userexperience, and manageability
  

4. Architecture and Standardization

• Design and maintain a scalableIntune architecture
  
• Develop blueprints, standards,and reference configurations
  
• Define naming conventions,policy structures, group models, scope tags, and roles
  
• Standardize configurations,compliance policies, security policies, and application deployment
  
• Prevent uncontrolled growth andduplication
  
• Advise on lifecycle managementof policies and configurations
  
• Separate standardconfigurations, exceptions, and experimental setups
  

5. Intune Suite and Endpoint Privilege Management

• Design, implement, and manageIntune Suite functionality
  
• Develop Endpoint PrivilegeManagement
  
• Define governance for elevatedaccess, approvals, and logging
  
• Align functionality withsecurity, management, and user goals
  
• Avoid unnecessary complexitythrough clear scope and phased implementation
  
• Advise on further use of IntuneSuite capabilities
  

6. Application Management, Packaging, and Company Portal

• Define standards forapplication packaging and lifecycle management
  
• Develop and maintain packagingblueprints
  
• Define detection rules,remediation, install/uninstall standards, and logging
  
• Determine which applicationsare available via Company Portal and under which conditions
  
• Structure categories and targetgroups
  
• Collaborate on deployment andrisk mitigation
  
• Ensure controlled andreproducible application deployment
  
• Reduce servicedesk workloadthrough better self-service
  

7. Process Design and Collaboration

• Act as the central contact forIntune and endpoint management
  
• Define and enforceorganization-wide working agreements
  
• Advise IT teams on Intunestandards
  
• Drive uniform ways of working
  
• Support complex incidents,changes, and projects
  
• Ensure cross-team consistency
  
• Escalate structural issues toIT management
  
• Translate operational signalsinto structural improvements
  

8. Documentation and Knowledge Management

• Create and maintaindocumentation, standards, and work instructions
  
• Translate complex setups intopractical processes
  
• Ensure documentation isactively used
  
• Transfer knowledge to IT teams
  
• Coach colleagues
  
• Prevent key knowledge frombeing person-dependent
  
• Support team maturity growth
  

9. Patch Management and Updates

• Design and manage patchingprocesses via Intune
  
• Configure Windows Update forBusiness policies and update rings
  
• Define patch strategies (pilot,phased rollout, emergency patches)
  
• Monitor patch compliance
  
• Coordinate with Security andInfrastructure
  
• Reduce security risks throughcontrolled patching
  
• Ensure processes arepredictable and documented
  

10. Operations and Troubleshooting

• Handle advanced 2nd/3rd linetroubleshooting
  
• Analyze incidents related toenrollment, policies, applications, and compliance
  
• Perform root cause analysis
  
• Support escalations
  
• Identify recurring issues anddrive improvements
  
• Ensure stable day-to-dayoperations without dependency on individuals
  

Result Areas

The Senior Intune Platform Engineerdelivers measurable outcomes in:

• Mature Intune platform
  
• Organization-wide governance
  
• Improved endpoint security
  
• Standardized IT ways of working
  
• Controlled applicationdeployment
  
• Professional self-service
  
• Controlled and auditablechanges 
  

Desired Profile

Education & Mindset

• Bachelor-level working andthinking capability (HBO) in IT or related field
  
• Proven experience withMicrosoft Intune in enterprise environments
  
• Experience in complex,multi-team and international environments
  
• Experience with governance,security, and standardization
  
• Experience advising managementand stakeholders
  

Experience

• Microsoft Intune / EndpointManagement
  
• Modern workplace and endpointmanagement
  
• Windows endpoint management
  
• Device enrollment and lifecyclemanagement
  
• Compliance policies andsecurity baselines
  
• Application packaging anddistribution
  
• Company Portal and self-service
  
• Endpoint Privilege Management
  
• Security and compliance
  
• Governance
  

Must-have Technical Skills

• Deep knowledge of MicrosoftIntune
  
• Strong Windows endpointmanagement experience
  
• Microsoft Entra ID knowledge
  
• Autopilot, enrollment,compliance, and security baselines
  
• Application deployment viaIntune
  
• Endpoint security andprivileged access
  
• PowerShell for automation
  
• Governance and processexperience
  
• Strong communication skills
  

Nice-to-have

• Intune Suite
  
• Microsoft Defender for Endpoint
  
• Conditional Access
  
• RBAC and scope tags
  
• ServiceNow or similar ITSMtools
  
• Multi-entity environments
  
• Zero-touch deployment
  

Competencies

• Strategically strong
  
• Governance-driven
  
• Security-focused
  
• Analytical and decisive
  
• Standardization-oriented
  
• Influential and collaborative
  
• Coaching and knowledge sharing
  
• Results-driven
  
• Strong communicator
  

Position in the Organization

The Senior Intune Platform Engineeroperates within IT Infrastructure / Modern Workplace / Endpoint Management and has a central, leading role in managing the modern workplace environment,reporting to the IT Manager.

The role collaborates closely with:Desktop Services, Servicedesk, Security, Infrastructure, Application Management, IT Management, External vendors andspecialists.

The position does not have directhierarchical authority but holds strong functional leadership throughstandards, governance, and direction-setting responsibilities that guide otherteams involved in endpoint management, application deployment, security, anduser support.