Specialist, IT Infrastructure

Responsibilities

• Support the end-to-end lifecycle of endpoints across Windows and macOS, including provisioning (Autopilot / Apple Business Manager), configuration, patching, application delivery, and retirement
• Maintain Intune-based device management policies, including compliance policies, configuration profiles, update rings, and application deployment
• Support macOS endpoint management using Intune, ensuring alignment with enterprise standards and roadmap toward unified management
• Maintain standardized endpoint baselines, including security hardening, encryption, and configuration aligned with Conditional Access and compliance requirements (e.g., GxP where applicable)
• Support automation-first solutions using scripting (PowerShell, Bash/Zsh) to streamline provisioning, configuration, and issue remediation
• Troubleshoot identity-driven access controls, including Azure AD, Conditional Access, device compliance, and M365 client configuration
• Provide escalation support for complex endpoint issues, performing root cause analysis and implementing long-term fixes to reduce repeat incidents
• Leverage endpoint analytics and monitoring tools (e.g., Nexthink, Intune reporting) to improve device health, performance, and user experience
• Collaborate with Security, Identity, Network, and Application teams to ensure endpoint solutions meet enterprise security, compliance, and usability standards
• Maintain clear and concise technical documentation, including runbooks, standards, and knowledge articles; support knowledge transfer to Service Desk and Tier 2 teams
• Track and improve endpoint KPIs such as device compliance, patch success rates, encryption coverage, software deployment success, and MTTR
• Contribute to roadmap execution by identifying opportunities to simplify tooling, reduce legacy dependencies, and accelerate Intune adoption

Qualifications

• Bachelors degree in Information Technology, Computer Science, Engineering, or equivalent experience
• 4+ years of experience in endpoint engineering, desktop engineering, or modern device management
• Hands-on experience with Microsoft Intune for device configuration, compliance, and application deployment
• Experience supporting macOS endpoints in an enterprise environment, including lifecycle management and troubleshooting
• Experience with Apple Business Manager (ABM) and macOS provisioning workflows
• Strong troubleshooting skills across OS, application, identity, and connectivity issues
• Experience with Azure AD / Entra ID, including Conditional Access and device compliance concepts
• Scripting/automation experience (PowerShell, Bash, or shell scripting)
• Familiarity with ITSM processes (incident, problem, change management)
• Strong communication and documentation skills