InTune Endpoint Engineer

About the role

ONSITE TORRANCE, CA – 6+ month W2 ONLY contract, fully onsite. Focus on Microsoft Intune, Microsoft Entra ID, Windows Autopilot, certificate‑based authentication, device hardening, and cross‑platform endpoint governance, with integrations for Apple, Android, and third‑party PKI/RADIUS solutions. Must be a U.S. Person (US Citizen or Green Card) per ITAR. The InTune Endpoint Engineer will lead the design, implementation, and validation of modern device management and security capabilities across Windows and other endpoint platforms, translate business and security requirements into scalable architectures, implement solutions in production, and support pilot‑to‑rollout execution with strong documentation and stakeholder coordination.

Responsibilities

• Intune Quickstart: lead discovery and design workshops to confirm tenant configuration, device platforms, enrollment models, and target‑state policy architecture; produce a configuration design document; configure Microsoft Intune tenant settings; design and implement Entra ID dynamic device and user group architecture; configure Windows Autopilot for cloud provisioning; configure Windows enrollment for Microsoft Entra ID‑joined devices, including Company Portal deployment and user‑driven enrollment; package and deploy applications using reusable deployment patterns