Lucknow, Uttar Pradesh
Job Summary
L1: This position will lead the design, implementation, governance and continuous improvement of Microsoft Intune and enterprise endpoint management services across corporate, BYOD, co-managed and cloud-native endpoints.
L2: The Intune Architect is expected to possess advanced hands-on expertise in Microsoft Intune administration and architecture, endpoint security, Windows Autopilot, application deployment, compliance policy design, Microsoft Graph based automation, DevOps integration and L3/L4 operational support. The role will work closely with workplace engineering, security, infrastructure, application, operations and customer stakeholders to translate requirements into scalable endpoint management standards and controls.
Key Responsibilities
Design, implement and govern enterprise-scale Microsoft Intune solutions for Windows, macOS, iOS/iPadOS and Android Enterprise devices.
Define endpoint management strategy including device enrollment, provisioning, configuration, compliance, security baseline, application deployment and lifecycle management standards.
Design and govern Windows Autopilot, BYOD, corporate-owned device, unattended enrollment and co-management models with SCCM/MECM where applicable.
Configure and govern device configuration profiles, compliance policies, Conditional Access policies, App Protection policies, endpoint security policies and data protection controls.
Design and optimize Intune application deployment standards including packaging requirements, assignment models, detection logic, deployment rings, troubleshooting methods and rollback practices.
Manage and support Windows Update rings, feature updates, Office 365 updates, evergreen servicing and Autopatch aligned endpoint compliance improvement.
Design and support device configurations including Wi-Fi, VPN, certificate-based authentication, LDAP/Active Directory related dependencies, CA integration and required Intune console configurations.
Build and maintain automation frameworks using PowerShell, Microsoft Graph API and other scripting approaches for provisioning, compliance checks, reporting, remediation and decommissioning.
Develop self-healing and proactive remediation scripts to reduce repetitive operational effort and improve endpoint compliance posture.
Implement DevOps practices for endpoint configuration management including Git version control, Azure DevOps/GitHub Actions pipelines and Infrastructure-as-Code approaches such as Terraform or Bicep where suitable.
Support Zero Trust endpoint security architecture by defining security baselines, compliance controls, vulnerability remediation inputs and monitoring requirements.
Provide L3/L4 technical leadership for complex Intune, Autopilot, application deployment, compliance, enrollment and Windows provisioning issues, including high-severity P1/P2 scenarios.
Create and maintain architecture documents, SOPs, technical standards, operational readiness plans, knowledge transfer artefacts and governance frameworks.
Collaborate with security, infrastructure, application, workplace engineering and service operations teams to ensure endpoint services remain secure, scalable, supportable and aligned to service levels.
Mentor engineers and administrators, conduct technical workshops, support upskilling initiatives and drive continuous service improvement.
Skill Requirements
Solid experience in administration, architecture and configuration of Microsoft Intune enterprise environments.
Deep knowledge of Microsoft Endpoint Manager, Microsoft Entra ID, Conditional Access, MDM, MAM, Defender for Endpoint and endpoint compliance controls.
Hands-on experience with Windows Autopilot, Windows 10/11 provisioning, unattended enrollment, device lifecycle management and troubleshooting.
Expertise in PowerShell scripting and Microsoft Graph API based automation for Intune management, reporting and remediation.
Working knowledge of Python, Bash, Azure DevOps, GitHub Actions, Git version control and DevOps operating models for endpoint configuration management.
Experience with application deployment through Intune, deployment optimization, detection rules, app delivery troubleshooting and software distribution governance.
Experience with Windows 11 evergreen support, Windows and Office feature updates, update rings, Autopatch concepts, availability, performance optimization and reporting.
Understanding of SCCM/MECM co-management, cloud-native endpoint strategies and migration from legacy endpoint management platforms such as Workspace ONE to Microsoft Intune.
Knowledge of endpoint security baselines, compliance posture management, vulnerability remediation planning and integration with tools such as Defender for Endpoint, Qualys, Nexthink, SIEM or equivalent platforms.
Ability to manage technical teams and support Intune services either as a technical lead or individual contributor.
Experience handling and driving P1/P2 situations from an Intune and Windows device management perspective.
Experience in enterprise transformation, operational readiness, release readiness, service recovery, reporting dashboards, AI-assisted automation or Power BI based insights will be an added advantage.
Other Requirements
Strong stakeholder management with the ability to lead architecture discussions, technical workshops and governance forums.
Ability to translate complex technical topics into clear business, customer and operational language.
Customer-focused approach with demonstrable experience delivering services to defined service levels and improving operational stability.
Strong analytical thinking, problem-solving ability and capability to drive issues to successful closure.
Ability to work effectively in an operational environment alongside technical, security, application and infrastructure teams.
Initiative-taking mindset with ability to learn and apply up-to-date technologies, automation practices and endpoint security improvements.
Robust written and verbal communication skills, attention to detail and self-motivation.
Ability to build positive working relationships with customers and internal stakeholders with a focus on consistent service excellence.
Ability to mentor, coach and upskill engineers while building reusable knowledge assets and operational standards.
Required Experience:
15+ years of overall experience in Endpoint Management, Workplace Services, IT Infrastructure, Mobility, Modern Workplace or related enterprise technology services.
10+ years of hands-on experience with Microsoft Intune and Microsoft Endpoint Management technologies.
Experience designing, implementing or governing large-scale enterprise endpoint management solutions.
Strong understanding of enterprise security, compliance, cloud transformation and Microsoft 365 environments.
Experience leading modernization or migration initiatives, operational transition, endpoint governance or global Windows device management services is preferred.
Preferred Certifications:
Microsoft Certified: Endpoint Administrator Associate (MD-102).
Microsoft Certified: Azure Administrator Associate (AZ-104).
Microsoft Certified: DevOps Engineer Expert (AZ-400).
Microsoft Certified: Enterprise Administrator Expert or Cybersecurity Architect Expert.
ITIL Foundation certification will be advantageous .
Azure AI, Security, Compliance and Identity fundamentals certifications will be an added advantage.
Key Deliverables:
Intune Architecture and Governance Framework.
Endpoint Security Design and compliance baseline standards.
Windows Autopilot and device enrollment strategy.
Device Compliance and Conditional Access Framework.
Application Deployment Standards and deployment governance model .
Automation roadmap for device lifecycle, compliance remediation, reporting and operational efficiency.
Modern Workplace Transformation Roadmap.
SOPs, technical standards, knowledge transfer and operational readiness documentation.
#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-
📌 Sr DomainTechnical Architect (India)
🏢 HCLTech
📍 India