SOE Engineer (Intune & Security Policies)

Job description

Role Description The SOE Engineer is responsible for the design, build, configuration, and validation of the Windows 11 Standard Operating Environment (SOE) within the client environment. The role focuses on Microsoft Intune, Windows Autopilot, security baselines, compliance policies, device configuration, application deployment, and endpoint security controls to ensure devices meet client operational and security requirements. Working closely with architects, security specialists, and deployment teams, the SOE Engineer develops and implements device management and policy configurations, supports endpoint onboarding processes, and ensures consistent deployment and operation of the SOE across the EUC fleet. You must be an Australian citizen to apply; security clearance is highly regarded. Key Responsibilities Design, build, and maintain the Windows 11 SOE. Configure Microsoft Intune device management policies and profiles. Implement Windows Autopilot provisioning and enrolment processes. Deploy and manage security baselines, compliance policies, and endpoint protection controls. Configure conditional access dependencies and device compliance integrations. Package, deploy, and manage applications through Microsoft Intune. Support device provisioning, rebuild, and onboarding processes. Validate endpoint compliance with client security and operational requirements. Develop SOE documentation, build procedures, and operational guidance. Support testing, pilot deployments, and transition to operations activities. Key Skills Microsoft Intune Windows 11 Administration Windows Autopilot Endpoint Security Management Microsoft Entra ID Device Compliance Policies Configuration Profiles Security Baselines Microsoft Defender for Endpoint Application Packaging and Deployment Win32 Application Management Endpoint Analytics Conditional Access Integration Device Provisioning and Lifecycle Management Endpoint Troubleshooting and Support PowerShell Automation . Preferred Experience Microsoft Intune and Endpoint Management implementations. Windows 11 SOE design and deployment. Windows Autopilot provisioning and large-scale endpoint rollouts. Microsoft Defender for Endpoint and endpoint security controls. Government or highly regulated environments. Enterprise endpoint management and security transformation programs. Migration from traditional endpoint management platforms to Microsoft Intune. .