Microsoft Intune Engineer

Position: Intune SME Engineer
Location: Nashville, TN
Type: Contract | Onsite

About the Role

We are seeking an experienced Microsoft Intune SME Engineer . This position involves designing, implementing, and maintaining enterprise-scale endpoint management solutions while championing innovation and operational excellence.

Candidates should possess a strong technical foundation in IT infrastructure engineering, with proven experience designing, documenting, and supporting large-scale solutions. A passion for mobile technology and modern device management is highly valued.

Key Responsibilities

·         Develop and maintain Surface release builds, including validation workflows, automated deployments, and robust documentation for scalable rollouts.

·         Provide Tier 3 (L3) engineering support for escalated issues related to Microsoft Intune, Windows Autopilot, and Windows OS, collaborating with operations teams to resolve complex incidents.

·         Design, build, and maintain a structured knowledge base, including technical documentation, troubleshooting guides, and self-service resources.

·         Drive continuous service improvement through scripting, automation, and process optimization, while documenting known issues and effective workarounds.

·         Partner with Security and Compliance teams to strengthen endpoint security, ensure policy alignment, and minimize risk exposure.

·         Customize and manage Windows OS builds, including branding, provisioning logic, and seamless Azure AD and Autopilot integration.

·         Create and manage Intune Configuration Profiles, Compliance Policies, Microsoft Defender settings, Firewall rules, and other MDM controls.

·         Oversee the end-to-end lifecycle of Windows devices—from provisioning to retirement; experience supporting iOS, iPadOS, or macOS is a plus.

·         Package and deploy applications using PowerShell App Deployment Toolkit (PSADT) with version control, rollback, and automation capabilities.

·         Implement and monitor patch management and vulnerability remediation strategies in alignment with cybersecurity best practices.

·         Design and administer certificate-based authentication workflows for users and devices using SCEP and NDES.

·         Automate policy enforcement and configuration deployment using Intune and supporting tools.

·         Leverage PowerShell scripting for system automation, configuration, and app management.

·         Conduct performance tuning, capacity planning, and proactive health checks to maintain service reliability.

·         Collaborate with cross-functional engineering teams to enhance user experience and foster endpoint management innovation.

·         Develop and execute test plans for new releases, features, and configuration updates before production rollout.

·         Mentor junior engineers and contribute to a culture of technical excellence, collaboration, and continuous learning.

·         Track and analyze performance metrics to uncover trends and recommend strategic improvements.

Qualifications

·         Proven expertise in Microsoft Intune, Windows Autopilot, and MDM solutions.

·         Strong scripting ability in PowerShell for automation and configuration management.

·         Solid understanding of endpoint security, compliance policies, and identity integrations with Azure AD.

·         Experience with enterprise application packaging and deployment using PSADT.

·         Skilled in infrastructure design, documentation, and operational best practices.

·         Familiarity with managing multi-platform environments (Windows, iOS, macOS) preferred.

·         Excellent communication and collaboration skills with a detail-oriented mindset.