Intune Engineer

Job description

Title: Intune Engineer KBR is a global provider of differentiated, professional services and technologies delivered across a wide government, defense and industrial base. Drawing from its rich 100-year history and culture of innovation and mission focus, KBR creates sustainable value by combining engineering, technical and scientific expertise with its full life cycle capabilities to help our clients meet their most pressing challenges today and into the future. We deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 80 countries and operations in over 29 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. At KBR, We Deliver. KBR is looking for a Microsoft Intune Administrator. This is an opportunity to work in a specialist technical role supporting secure, enterprise scale endpoint environments across the United Kingdom. You will be responsible for administering and improving the organisation’s Microsoft Intune platform, Microsoft Configuration Manager (SCCM/MECM) environment, packaging and deploying software, maintaining endpoint configuration and compliance standards, and supporting patch deployment across the Windows, macOS and Linux estate. The role requires strong hands-on experience with Microsoft Intune, Microsoft Configuration Manager (SCCM/MECM), Active Directory, Microsoft Azure and Microsoft Entra ID. You will work closely with infrastructure, cybersecurity, application and service management teams to troubleshoot endpoint, identity, application deployment and connectivity issues across cloud and on premises environments. This is a permanent full-time opportunity based from our Leatherhead offices. The successful candidate must be a UK citizen and must hold, or be able to successfully complete, Baseline Personnel Security Standard screening. Responsibilities Administer, maintain and optimise the organisation’s Microsoft Intune and Microsoft Configuration Manager (SCCM/MECM) environments. Configure and manage device enrolment, configuration profiles, compliance policies, security baselines, application policies and endpoint management standards. Package, test and deploy software for delivery through Microsoft Intune, Microsoft Configuration Manager and other approved enterprise software distribution platforms. Create and maintain application packages, including installation commands, detection methods, dependencies, requirements, supersedence rules and uninstall processes. Troubleshoot failed software installations, application conflicts, device enrolment issues and endpoint configuration problems. Administer and maintain Microsoft Configuration Manager application deployment infrastructure, software distribution processes and operating system deployment capabilities. Manage Windows Server Update Services (WSUS) and Microsoft Configuration Manager software update deployments for Windows desktops and Windows Server environments. Manage Windows update rings, feature updates, quality updates, driver updates and other endpoint patching policies through Windows Update for Business and Microsoft Configuration Manager. Coordinate, test and deploy operating system and application patches across the Windows, macOS and Linux estate using approved endpoint and patch management platforms. Monitor patch compliance, investigate deployment failures and support the remediation of vulnerable or non-compliant devices. Support Microsoft Windows Autopilot device provisioning, enrolment and deployment processes. Administer integrations between Microsoft Intune, Microsoft Entra ID, Active Directory, Microsoft Azure, Microsoft Configuration Manager and related endpoint services. Support identity and device management capabilities, including device registration, group membership, role based access, Conditional Access dependencies and authentication services. Administer and support Apple Business Manager, Automated Device Enrolment and related Apple device lifecycle management capabilities. Configure and manage endpoint policies, application deployments and compliance settings across Windows, macOS, iOS and Android platforms. Plan, coordinate and implement operating system upgrades and enterprise software update initiatives across supported endpoint platforms. Troubleshoot issues involving Microsoft Intune, Microsoft Configuration Manager, Active Directory, Microsoft Entra ID, Windows Server, Microsoft Azure and enterprise applications. Investigate endpoint connectivity issues involving Domain Name System, Dynamic Host Configuration Protocol, routing, firewalls, proxies, virtual private networks and internet access. Analyse Intune logs, Microsoft Configuration Manager logs, Windows event logs, application installation logs and relevant platform data to identify root causes and resolve technical issues. Develop and maintain scripts used for application packaging, device configuration, remediation and operational automation. Monitor platform health, device compliance, application deployment status and endpoint configuration performance. Support endpoint lifecycle management activities, including provisioning, configuration, software delivery, patching, remediation and decommissioning. Contribute to incident, problem and change management processes, ensuring changes are properly assessed, tested, documented and implemented. Maintain accurate technical documentation, packaging standards, operational procedures, support guides and configuration records. Work with cybersecurity, infrastructure, application and service delivery teams to improve endpoint security, operational resilience and the end user experience. Requirements Essential The right to live and work in the UK. The ability to successfully complete and maintain Baseline Personnel Security Standard screening. Strong hands-on experience administering Microsoft Intune in an enterprise environment. Strong hands-on experience administering Microsoft Configuration Manager (SCCM/MECM) in an enterprise environment. Experience configuring device enrolment, compliance policies, configuration profiles, security settings, application deployments and endpoint management standards. Strong experience packaging, testing and deploying software through Microsoft Intune and Microsoft Configuration Manager. Experience creating and troubleshooting Microsoft Win32 application packages, installation commands, detection methods, dependencies, requirements and uninstall processes. Experience managing Microsoft Configuration Manager software distribution, operating system deployment and software update processes. Experience managing Windows Server Update Services (WSUS) and enterprise patch deployment processes. Experience managing and deploying patches across enterprise Windows desktop and Windows Server environments. Experience supporting patch deployment and compliance across Linux environments. Experience supporting endpoint management across macOS, iOS and Android platforms. Experience administering Apple Business Manager and Apple device enrolment solutions. Strong knowledge of Microsoft Active Directory, including users, groups, Group Policy, organisational units, authentication and device management. Strong knowledge of Microsoft Entra ID, including users, groups, device identities, enterprise applications and Conditional Access dependencies. Experience supporting Microsoft Azure services and cloud hosted infrastructure. Experience supporting Windows Server and Windows endpoint environments. A practical understanding of enterprise networking concepts, including Internet Protocol addressing, subnets, Domain Name System, Dynamic Host Configuration Protocol, routing, firewalls, proxies, ports and protocols. Proven ability to troubleshoot complex endpoint, application deployment, identity, patching and connectivity issues. Experience analysing logs and platform data to diagnose software installation, device configuration and compliance problems. Experience working within structured incident, problem and change management processes. Strong technical documentation and operational procedure writing skills. Excellent communication, problem solving and stakeholder engagement skills. The ability to work effectively with infrastructure, cybersecurity, application, service management and third-party support teams. Desirable Relevant Microsoft certification in endpoint administration, Microsoft 365, Azure or identity technologies. Experience with Microsoft Windows Autopilot and modern device provisioning. Experience with Windows Update for Business, Microsoft Entra joined devices and cloud native endpoint management. Experience with Microsoft Defender for Endpoint and endpoint security integrations. Experience with Linux administration, software repositories, package management and patching processes. Experience with PowerShell or another scripting language used for software packaging, remediation and automation. Experience with Microsoft Graph, automation platforms or infrastructure as code technologies. Experience with application packaging formats such as Microsoft Installer, Microsoft Software Installer and MSIX. Experience with third-party patch management or endpoint automation platforms. Experience with Patch My PC or similar enterprise application and patch management solutions. Experience migrating devices from traditional domain joined management to Microsoft Entra joined and Microsoft Intune managed environments. Experience within Defence, Government or another highly regulated environment. Knowledge of information security frameworks, operational controls and secure endpoint configuration standards. KBR Company Information When you become part of the KBR team, your opportunities are endless. Through collaboration with our customers, we’re defining tomorrow’s challenges, then providing the solutions and services to overcome those challenges, always maintaining our commitment to total safety and reliability. At KBR, we partner with government and industry clients to provide purposeful and comprehensive solutions with an emphasis on efficiency and safety. With a full portfolio of services, proprietary technologies and expertise, our employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis. Working at KBR means being rewarded for your contributions. In addition to competitive benefits and professional development, our people are empowered to use all their potential, creating meaningful change for themselves and our clients. We attract the best minds in the world because our expertise thrives on creativity, resourcefulness and collaboration. That is how we supply our clients with cutting-edge solutions and services. As the needs of the world change, we’re ready to respond and guide the way forward with strategic, sustainable, and technological advancements grounded in more than a century of practical application and execution. #LI-EF1 #LI-HYBRID