• Design and implement Microsoft Intune-based solutions that align with user needs, security requirements, and enterprise standards • Package, deploy, and maintain applications using Intune, with a focus on automation, version control, and user experience • Create and manage Intune policies for application deployment, device compliance, security configurations, and configuration profiles • Ensure seamless integration with Microsoft 365 services, including Defender for Endpoint, Conditional Access, and Autopilot • Design and deploy Windows 10 and 11 provisioning workflows using Intune, Autopilot, ESP, and dynamic provisioning techniques • Configure and manage Windows Update for Business (WUfB) policies to ensure timely and secure OS updates • Maintain and evolve standardized Windows 10 and 11 deployment images, leverage both cloud-native and traditional imaging strategies. • Collaborate with infrastructure teams to transition Group Policy Objects (GPOs) to modern Intune equivalents (e.g., Settings Catalog, ADMX-backed policies) • Work closely with the Active Directory and SCC teams to ensure SCCM readiness and alignment with broader infrastructure goals • Implement security best practices and compliance frameworks within Intune, including endpoint protection, encryption, and data loss prevention • Monitor and respond to security incidents related to mobile devices and endpoints, integrating with SIEM and SOC workflows • Continuously evaluate and improve endpoint management processes, proposing innovative solutions and communicating effectively with leadership • Develop and maintain comprehensive documentation for Intune configurations, provisioning processes, legacy GPO mappings, and SCCM coexistence strategies