Responsibilities
- Manage end-to-end lifecycle operations for Windows and macOS devices, covering setup, configuration, updates, software deployment, and decommissioning using Autopilot and Apple Business Manager
- Administer device management policies in Intune, including compliance rules, configuration templates, update rings, and app distribution
- Support management of macOS endpoints via Intune to meet enterprise standards and advance unified endpoint management goals
- Enforce standardized device configurations with security hardening, encryption, and settings aligned to Conditional Access and compliance policies such as GxP
- Develop and use automation scripts in PowerShell, Bash, or Zsh to streamline device provisioning, configuration, and issue resolution
- Diagnose and resolve identity-related access issues involving Azure AD, Conditional Access policies, device compliance status, and M365 client settings
- Serve as escalation point for complex endpoint problems, conducting root cause analysis and deploying permanent solutions to prevent recurrence
- Utilize monitoring and analytics platforms like Nexthink and Intune reporting to assess device health, performance, and user experience
- Partner with Security, Identity, Network, and Application teams to ensure endpoint configurations meet organizational security, compliance, and usability requirements
- Create and maintain accurate technical documentation such as runbooks, standards, and knowledge base articles, and assist in training support teams
- Monitor and enhance key endpoint metrics including compliance rates, patching success, encryption coverage, software deployment effectiveness, and mean time to repair
- Support strategic initiatives by identifying ways to simplify technology stacks, reduce reliance on legacy systems, and expand Intune adoption
