Senior Compliance & Automation Engineer (IT Infrastructure)

Job Description

We are seeking an experienced and highly motivated Compliance and Automation Engineer to join our growing IT Infrastructure team. In this role, you will take co-ownership of our existing Microsoft Intune environment while also architecting and deploying scalable Intune solutions as we transition toward a Managed Service Provider (MSP) model. You will be a cornerstone of our endpoint management strategy, balancing day-to-day operational excellence with forward-looking automation and multi-tenant infrastructure design.

This is a senior-level, hands-on role that demands both deep technical expertise and the leadership presence to drive initiatives independently. The right candidate is a self-starter who thrives in ambiguity, takes full ownership of assigned tasks, and sees projects through from inception to completion with minimal direction.

Job Responsibilities & Requirements

Responsibilities:

Intune Environment Management

• Own and maintain the current Microsoft Intune environment, ensuring high availability, performance, and security compliance at all times.

• Monitor, troubleshoot, and resolve endpoint management issues proactively, minimizing disruption to end users and business operations.

• Manage device enrollment, configuration profiles, and compliance policies, across Co-managed and Hybrid Azure AD-joined environments.

• Partner with the security team to enforce organizational compliance standards, CIS benchmarks, and regulatory requirements through Intune policy frameworks.

• Conduct regular audits of the Intune environment, producing compliance reports and remediation plans as needed.

• Develop repeatable, scalable deployment frameworks and templates to streamline onboarding of new employees.

MSP-Style Multi-Tenant Expansion

• Design, architect, and deploy new Intune environments as the organization scales into an MSP support model, supporting multiple customer tenants.

• Develop repeatable, scalable deployment frameworks and templates to streamline onboarding of new client environments.

• Establish and enforce best practices, standards, and governance models applicable across all managed tenants.

• Collaborate with leadership and client stakeholders to understand requirements and translate them into Intune configurations and automation pipelines.

Automation & DevOps Integration

• Design and implement automation solutions using PowerShell, Microsoft Graph API, and other scripting tools to reduce manual effort and increase operational consistency.

• Apply DevOps principles including CI/CD pipelines, version control (Git), and Infrastructure-as-Code (IaC) methodologies to endpoint management workflows.

• Integrate Intune with Azure DevOps or GitHub Actions for automated policy deployment, testing, and rollback capabilities.

• Continuously identify opportunities to automate repetitive tasks, improving efficiency across both current and future client environments.

Leadership & Cross-Functional Collaboration

• Serve as the subject matter expert (SME) for Intune and modern endpoint management across the organization.

• Provide technical mentorship and guidance to junior engineers and IT staff on best practices, tooling, and architecture decisions.

• Lead technical discussions, project planning sessions, and cross-departmental meetings to drive alignment on endpoint strategy.

• Document solutions, runbooks, and standard operating procedures (SOPs) to ensure knowledge transfer and operational continuity.

• Communicate technical concepts clearly to both technical teams and non-technical stakeholders, including leadership and clients.

Required Qualifications:

• 5+ years of hands-on experience designing, implementing, and deploying solutions with Microsoft Intune in production environments.

• Demonstrated experience with Co-management (Microsoft Endpoint Configuration Manager + Intune) and Hybrid Azure AD-joined device scenarios.

• Proven track record of managing Intune environments at scale, including multi-tenant or MSP-style deployments.

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent combination of experience and education which clearly indicates the ability to perform the essential functions of the position.

Other Required Technical Qualifications:

• Deep expertise in Microsoft Intune: device enrollment (BYOD, Corporate), configuration profiles, compliance policies, app deployment, and Windows Autop