Workspace One/SCCM/Intune Lead Engineer – Enterprise Endpoint Management (L3)

Job description

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive. Your day at NTT DATA As an Applications Managed Services Engineer (L3) at NTT DATA, you will play a crucial role in providing top-notch managed services to our clients. Your day will involve proactively identifying and resolving incidents related to packaged application technologies like ErP and middleware, ensuring the seamless operation of business-critical applications. You will be the go-to expert for complex technical challenges and will use your deep technical expertise to deliver exceptional client outcomes. You will ensure that all assigned technologies within a client's environment are configured, installed, tested, and fully operational. This includes performing necessary checks, applying monitoring tools, and responding to alerts. When issues arise, you will investigate, analyze, and log these incidents with an eye for detail, escalating to third-party vendors when needed. In this dynamic role, you will also conduct monthly reviews of incidents and service requests, continuously striving to improve the quality of our service. You will provide onsite technical support and field engineering services as necessary, always aiming to optimize work processes and explore opportunities for automation. Your Responsibilities extend to the management and implementation of projects within the technology domain, delivering on client requirements and timelines efficiently. You will also play a part in executing disaster recovery functions and tests, ensuring that our clients' DATA and systems are always protected. Technical Leadership & Architecture Platform Administration: Deploy, and maintain the Workspace ONE architecture (UEM, Access, Intelligence). Device Management: Manage the enrollment, provisioning, and ongoing configuration of mobile and desktop (Windows) endpoints Implement Workspace One/SCCM/ConfigMgr hierarchy including site server topology, DP placement, and boundary configuration for enterprise global environments. Implementation of enterprise Workspace One/SCCM/ConfigMgr and Microsoft Intune environments for global client accounts. Architect co-management strategies, Autopilot provisioning frameworks, and Modern Management transition roadmaps. Define EPM platform standards, governance frameworks, and configuration baselines across multiple global accounts managed from India. Evaluate emerging Workspace One/Microsoft Endpoint Manager capabilities and provide technical roadmap recommendations to delivery managers and clients. Enterprise Patch Management Own enterprise-level patch management programs — governing policy, SLAs, exception management, and compliance reporting across 10,000+ endpoint fleets. Design and manage Intune Expedite policies, WUfB rings, and SCCM ADR-based patching for complex multi-site global environments. Lead vulnerability remediation programs integrating Qualys/Tenable findings with SCCM/Intune patch deployment cycles. Develop patching governance documentation, escalation playbooks, and compliance dashboards for client and internal stakeholders. Lead emergency and zero-day patching response including containment, deployment, and post-incident review from India delivery centre. Advanced OS Deployment & Provisioning Lead enterprise Windows 11 migration programs including readiness assessment, task sequence design, pilot execution, and phased rollout. Design and deliver Windows Autopilot + Intune Zero Touch Provisioning frameworks for large-scale global device refresh programs. Own OSD platform operations — WinPE environments, MDT integration, driver library management, and image currency. Architect golden image build pipelines, compliance validation, and automated post-deployment configuration. Define device lifecycle management policies from procurement through decommission for managed global client environments. Automation & Integration Architect PowerShell-based automation frameworks for SCCM and Intune operational efficiency and compliance reporting. Lead development of Microsoft Graph API integrations for Intune bulk operations, automated policy enforcement, and reporting. Design SCCM SQL/Power BI reporting solutions for delivery management and client-level visibility into endpoint health and patch posture. Oversee integration between EPM platforms and security tooling (Qualys, Defender for Endpoint) for holistic endpoint health management. Client Engagement & Delivery Governance Serve as primary technical point of contact for assigned EPM accounts — leading governance calls, delivery reviews, and escalation resolution from India. Drive SLA attainment, delivery quality, and continuous improvement across managed global endpoint accounts. Contribute to SOW development, effort estimation, and technical proposal documentation for new and expanding EPM engagements. Mentor and develop Grade 7–9 engineers through technical coaching, design reviews, and structured capability building. Collaborate with NTT DATA India practice leadership and onshore counterparts on EPM service development and client strategies. REQUIRED SKILLS Workspace One/Microsoft SCCM/ConfigMgr — site architecture, hierarchy design, OSD, patch management, reporting (expert) ITSM Tool: BMC Helix Microsoft Intune — full MDM/MAM lifecycle, co-management, Autopilot, WUfB, Conditional Access (expert) Windows 10/11 enterprise deployment — task sequences, MDT, WinPE, driver management, ZTP Autopilot Azure AD / Entra ID — identity-driven EPM, Conditional Access, MFA, device trust, RBAC PowerShell advanced automation — SCCM SDK, Graph API, reporting pipelines, operational tooling SQL Server + Power BI — SCCM database reporting, compliance dashboards, management-level visualizations Vulnerability management — Qualys/Tenable integration with patch management lifecycle Client-facing delivery governance from India — SLA management, delivery reviews, escalation ownership PREFERRED QUALIFICATIONS Microsoft Certified: Endpoint Administrator (MD-102) — required VCP-DW / Omnissa Digital Workspace certifications — mandatory Microsoft Certified: Azure Solutions Architect or Security Engineer certifications Experience with Microsoft Endpoint Analytics and Intune Advanced Analytics Prior India-based delivery leadership for Fortune 500 global accounts (10,000+ endpoints) Familiarity with ISO 27001, India IT Act compliance, and global data residency considerations in EPM Workplace type : About NTT DATA NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D. Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today. Third parties fraudulently posing as NTT DATA recruiters NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us .