Summary
This position is open for a Microsoft Intune SME with 3 to 5 years of experience in modern endpoint management, focused on engineering, delivering and maintaining the Windows Standard Operating Environment (SOE) in a hybrid co-managed environment.
This role is hands-on and delivery-focused, requiring deep technical expertise across Microsoft Intune, Windows Autopilot, and MECM (ConfigMgr) to support the full lifecycle of SOE development. From image strategy and policy enforcement to compliance, automation and software delivery.
The ideal candidate brings a strong understanding of modern management practices, a proactive engineering mindset and experience managing large-scale enterprise endpoint environments.
Main Responsibilities:
* Design, maintain and optimize SOE deployment solutions using Microsoft Intune and MECM task sequences.
* Drive the ongoing improvement of Autopilot-based provisioning workflows and hybrid build strategies.
* Configure and maintain compliance policies, configuration profiles and conditional access policies.
* Develop PowerShell automation to streamline policy deployment, reporting and device lifecycle management.
* Perform root cause analysis and remediation for SOE deployment or policy application failures.
* Manage application lifecycle and packaging for Win32, PSADT and MSIX-based deployments.
* Oversee software update and patching strategies in a co-managed environment.
* Support mobile device and application management (Android/iOS) as required.
* Collaborate with stakeholders across engineering, security and operations to ensure secure and compliant device configuration.
* Contribute to technical documentation, knowledge transfer and continuous service improvement.
Key Skills and Qualifications:
* A minimum of 3 years' experience in SOE engineering, modern device management, or desktop architecture roles.
* Strong scripting and automation capability with PowerShell.
* A sound understanding of modern Windows 10/11 management principles.
* Deep hands-on experience with Microsoft Intune, Windows Autopilot and co-management.
* Proven capability building and supporting task sequences in MECM.
* Excellent communication skills, including the ability to explain technical detail to non-technical stakeholders.
* An ability to work both independently and collaboratively in a fast-paced, high-accountability environment.
* Demonstrated initiative and adaptability in enterprise environments.
Desirable Experience:
* Experience with SOE version control, image strategy and policy design.
* Practical knowledge of application packaging and deployment tooling (e.g. PSADT, MSIX).
* Familiarity with ITIL-based operations, especially change, problem and release management.
Certifications (Preferred):
* Microsoft Certifications in Endpoint Manager, Configuration Manager or Windows Client (e.g. MD-102).
* ITIL Foundation.
Additional Requirements:
* Australian Citizen.
* Baseline / NV1 Security Clearance.
We are an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.