Senior Digital Workplace Engineer

As a Senior Digital Workplace Engineer, you will be responsible for leading technical strategy and operations for digital workplace technology, with a primary focus on Microsoft Intune and Mac MDM solutions. You will ensure the organization’s device ecosystem is secure, scalable, and modern, while enabling employees with a seamless digital experience. This role involves technical leadership, architecture, and hands-on expertise while mentoring team members and collaborating across security, engineering, and business teams to drive impactful solutions.

Key

Responsibilities Lead the administration, configuration, and optimization of Microsoft Intune across Windows, macOS, iOS, and Android devices. Develop and enforce policies for device enrollment, compliance, security baselines, and configuration profiles. Monitor endpoint health, security posture, and compliance, proactively resolving issues. Integrate Intune with Microsoft 365, Azure, and Entra ID (Azure AD) to implement Conditional Access, dynamic groups, and identity protections. Automate Intune administrative tasks using PowerShell and Microsoft Graph API, creating scripts and workflows for efficiency. Design and manage Windows Autopilot, Apple Automated Device Enrollment (ADE via ABM/ASM), Android Enterprise, and application deployment strategies (Win32, LOB, Store). Implement BYOD strategies leveraging MDM and MAM controls to ensure data protection. Manage OS updates and patching strategies across all supported platforms. Apply Zero Trust security principles, CIS benchmarks, and compliance standards (ISO 27001, SOC 2) within the endpoint environment. Lead and contribute to migration projects (e.g., SCCM, Workspace ONE, Jamf to Intune). Collaborate with Technology, Security, Finance, and Procurement to assess build vs. buy solutions and integrations. Provide technical mentorship to the engineering team, contributing to solution design and knowledge sharing.

Requirements: Experience & Certifications: 6+ years of experience in MDM and Endpoint Management, with 5+ years dedicated to Microsoft Intune administration. Deep, demonstrable expertise in Windows, macOS, Android, and iOS device lifecycle management. Certified in MDM administration (Intune, Jamf) or equivalent. Experience in migrating device fleets between MDM solutions (e.g., SCCM, Workspace ONE, Jamf). Technical Expertise: Proficient in PowerShell scripting and Microsoft Graph API for automation and reporting. Strong knowledge of Microsoft Entra ID (Azure AD), including SSO (SAML/OIDC), SCIM provisioning, and Conditional Access. Familiar with Microsoft Defender for Endpoint and enterprise browser management (Microsoft Edge, Firefox, etc.). Understanding of Zero Trust frameworks and compliance standards (CIS, ISO 27001, SOC 2). Experience with application control/allowlisting technologies (WDAC, AppLocker, Intune App Control). Soft Skills & Approach: Excellent problem-solving and collaboration skills, working seamlessly with technical and non-technical teams. Strong documentation and communication skills for stakeholder alignment. Proactive mindset with the ability to balance security with usability. Willingness to mentor and upskill peers within the engineering team.