As a Senior Digital Workplace Engineer, you will be responsible for leading technical strategy and operations for digital workplace technology, with a primary focus on Microsoft Intune and Mac MDM solutions. You will ensure the organization’s device ecosystem is secure, scalable, and modern, while enabling employees with a seamless digital experience. This role involves technical leadership, architecture, and hands-on expertise while mentoring team members and collaborating across security, engineering, and business teams to drive impactful solutions. Key Responsibilities • Lead the administration, configuration, and optimization of Microsoft Intune across Windows, macOS, iOS, and Android devices. • Develop and enforce policies for device enrollment, compliance, security baselines, and configuration profiles. • Monitor endpoint health, security posture, and compliance, proactively resolving issues. • Integrate Intune with Microsoft 365, Azure, and Entra ID (Azure AD) to implement Conditional Access, dynamic groups, and identity protections. • Automate Intune administrative tasks using PowerShell and Microsoft Graph API, creating scripts and workflows for efficiency. • Design and manage Windows Autopilot, Apple Automated Device Enrollment (ADE via ABM/ASM), Android Enterprise, and application deployment strategies (Win32, LOB, Store). • Implement BYOD strategies leveraging MDM and MAM controls to ensure data protection. • Manage OS updates and patching strategies across all supported platforms. • Apply Zero Trust security principles, CIS benchmarks, and compliance standards (ISO 27001, SOC 2) within the endpoint environment. • Lead and contribute to migration projects (e.g., SCCM, Workspace ONE, Jamf to Intune). • Collaborate with Technology, Security, Finance, and Procurement to assess build vs. buy solutions and integrations. • Provide technical mentorship to the engineering team, contributing to solution design and knowledge sharing. Requirements: Experience & Certifications: • 6+ years of experience in MDM and Endpoint Management, with 5+ years dedicated to Microsoft Intune administration. • Deep, demonstrable expertise in Windows, macOS, Android, and iOS device lifecycle management. • Certified in MDM administration (Intune, Jamf) or equivalent. • Experience in migrating device fleets between MDM solutions (e.g., SCCM, Workspace ONE, Jamf). Technical Expertise: • Proficient in PowerShell scripting and Microsoft Graph API for automation and reporting. • Strong knowledge of Microsoft Entra ID (Azure AD), including SSO (SAML/OIDC), SCIM provisioning, and Conditional Access. • Familiar with Microsoft Defender for Endpoint and enterprise browser management (Microsoft Edge, Firefox, etc.). • Understanding of Zero Trust frameworks and compliance standards (CIS, ISO 27001, SOC 2). • Experience with application control/allowlisting technologies (WDAC, AppLocker, Intune App Control). Soft Skills & Approach: • Excellent problem-solving and collaboration skills, working seamlessly with technical and non-technical teams. • Strong documentation and communication skills for stakeholder alignment. • Proactive mindset with the ability to balance security with usability. • Willingness to mentor and upskill peers within the engineering team.