Intune Engineer - Associate (Chicago)

2–5 years of endpoint management experience1–3 years of Intune-focused experienceSCCM administration experience transitioning into Intune is preferred130 hours per month, work days and times yet to be determined.100% on-siteUniversity industry experience a plusCore Technical SkillsCore Intune Configuration (Primary Skillset)Microsoft Intune administrationConfiguration profiles and compliance policiesDevice group creation and assignmentApplication deployment through IntuneWin32 app packaging and deploymentCompany Portal app managementWindows Autopilot configuration and supportEndpoint policy deployment (BitLocker, LAPS, Update Rings, security baselines)GPO migration support into IntuneEntra ID / Azure AD device managementDevice enrollment and provisioning validationBasic troubleshooting and deployment issue resolutionJunior / Mid-Level Intune Engineer – Required Skills & Experience1. Core Intune Configuration (Primary Skillset)Hands-on experience working in Microsoft Intune for day-to-day configuration tasksAbility to:Create and assign configuration profilesDeploy and manage compliance policiesConfigure device groups and assignmentsComfortable working in a pre-defined design and following implementation standardsFocus: Execute builds, not design them2. Application Deployment (Operational)Experience deploying applications through Intune:Basic Win32 app packaging and deploymentCompany Portal-managed appsCommon enterprise apps (Office, browsers, VPN clients, Zoom, etc.)Ability to:Configure install/uninstall commandsSet basic detection rulesValidate successful deployments on devices3. Windows Autopilot – Configuration SupportFamiliar with:Registering devices in AutopilotAssigning profiles and group tagsBasic ESP configurationAble to:Perform device enrollment testingValidate provisioning outcomes (apps, policies applied)4. Endpoint Policy Implementation (Execution)Ability to configure and deploy:BitLocker policiesLAPS policiesWindows Update ringsBasic security and baseline profilesResponsible for:Assigning policies to test/pilot groupsVerifying policy application and compliance status5. GPO Migration Support (Not Design Lead)Ability to:Assist with translating documented GPO mappings into Intune policiesCreate configuration profiles based on provided mappingPerform validation and testingNot responsible for:Discovery or rationalization strategyFocus: Build what's already defined6. Testing, Validation & TroubleshootingHands-on experience:Validating device enrollmentConfirming app installs and policy applicationBasic troubleshooting (logs, retry deployment, reassignment)Comfortable working in:UAT / Pilot environments before production rollout7. Basic Entra ID / Device Management TasksFamiliarity with:Creating and managing device/user groupsAssigning licenses and policiesVerifying device join statusNo requirement for deep identity architecture knowledge8. Hybrid Access Validation (Execution Support)Ability to assist with:Testing access to file shares, VPN, and printersFollowing predefined network/access requirementsDocumenting results and issues for escalation9. Documentation & Runbook UpdatesAbility to:Document configuration steps performedUpdate runbooks and deployment guidesCapture issues and resolutions during testing10. Delivery Model & Work StyleWorks effectively:Under direction of a senior architect/leadWith clearly defined tasks and backlogCapable of:Owning assigned build tasks (apps, policies, device configs)Providing status updates and raising blockers early