Intune Architect at PCI Professional Services LLC
Worldwide
$156k - $176k
<div>PCI Professional Services is seeking an Intune Architect for an upcoming opportunity. This position is remote and reports to the Program Manager.</div> <div> </div> <div><b>Responsibilities:</b></div> <ul> <li>Design and lead the end to end Microsoft Intune architecture for a large federal enterprise, establishing secure modern management patterns across Windows, iOS/iPadOS, and Android.</li> <li>Define security baselines and conditional access guardrails</li> <li>Engineer a Blackberry UEM → Intune migration and co management strategy (SCCM/Configuration Manager)</li> <li>Stand up technical governance (standards, patterns, and guardrails) to keep the environment compliant, resilient, and cost effective.</li> <li>Partners with Security, Identity, Networking, Client Engineering, and PMO to deliver a Zero Trust aligned endpoint platform.</li> </ul> <div> </div> <div><b>Minimum Qualifications:</b></div> <div> <ul> <li>Bachelor's degree in a related discipline</li> <li>Minimum 8 years experience in relevant field.</li> <li>Experience: 7–10+ years in endpoint management; 3–5+ architecting Intune at enterprise scale (10k+ devices or federal programs).  </li> <li>Intune & Modern Management (Expert): Autopilot provisioning, device compliance, configuration profiles, application lifecycle (Win32/MSIX/MAM), update rings, and RBAC/scopes. </li> <li>Security & Compliance: Conditional Access design, BitLocker governance, Microsoft Security Baselines, Defender for Endpoint integration, threat & vulnerability workflows. </li> <li>Entra ID & Identity: Azure AD/Entra ID tenant administration, user/group design, SSO (SAML/OIDC), device identities, certificate/PKI integration. </li> <li>Automation: PowerShell scripting; configuration as code mindset; build reusable modules and reporting. </li> <li>Mobile Management (MDM/MAM): MAM/app protection policies, conditional launch controls. </li> <li>Co Management & Migration: Hands on experience transitioning SCCM/Configuration Manager to cloud based Intune; defining co management workloads and phased cutovers. </li> <li>Delivery: Demonstrated ability to lead pilots, wave plans, and executive level briefings; strong documentation and stakeholder management.</li> <li>Public Trust (or higher) clearance eligibility</li> </ul> <div><b>Preferred Skills</b></div> <div> <ul> <li>Zero Trust architecture and NIST 800 53 control mapping for endpoints; familiarity with FedRAMP/ATO processes. </li> <li>Win32 packaging at scale (IntuneWin, detection rules, dependencies), app remediation, and Autopatch/Update rings optimization. </li> <li>Advanced CA design (session controls, sign in risk, compliant network locations), Entra ID P2 features (Identity Protection, Access Reviews). </li> <li>Defender for Endpoint advanced hunting (KQL), attack surface reduction (ASR), tamper protection, and automated response playbooks. </li> <li>Enterprise certificate management (device certs, SCEP/PKCS), Wi Fi/VPN profiles, and network pre requisites. </li> <li>Terraform/Bicep or pipeline driven deployments for repeatable config; Git based governance for profiles/policies. </li> <li>Incident response and DR runbooks for endpoint outages; executive communications and change management expertise. </li> <li><span style="white-space:pre">P</span>rior federal client experience.</li> </ul> <div> <div style="-webkit-tap-highlight-color: transparent; color: rgba(0, 0, 0, 0.87); font-family: InterVariable, Helvetica, Arial, sans-serif;"> <div style="-webkit-tap-highlight-color: transparent;"> <div style="-webkit-tap-highlight-color: transparent; text-align: center;"><i style="-webkit-tap-highlight-color: transparent;">PCI Federal (PCIF) and its subsidiaries are an equal-opportunity employer. PCIF does not discriminate on the basis of age, sex, race, national origin, religion, marital status, sexual orientation or identity, Veterans or Disability status.</i></div> <div style="-webkit-tap-highlight-color: transparent; text-align: center;"> </div> <div style="-webkit-tap-highlight-color: transparent; text-align: center;"><i style="-webkit-tap-highlight-color: transparent;">Preference may be extended to qualified Native American Indian candidates in accordance with applicable federal law.</i></div> </div> </div> <div style="-webkit-tap-highlight-color: transparent; color: rgba(0, 0, 0, 0.87); font-family: InterVariable, Helvetica, Arial, sans-serif;"> </div> <div style="-webkit-tap-highlight-color: transparent; color: rgba(0, 0, 0, 0.87); font-family: InterVariable, Helvetica, Arial, sans-serif;"> </div> </div> </div> </div><br>
Apply Now
