Sr. SCCM OSD/Intune Engineer

Overview

Be inspired. Be valued. Belong. 

 

At Emory Healthcare we fuel your professional journey with better benefits, valuable resources, ongoing mentorship and leadership programs for all types of jobs, and a supportive environment that enables you to reach new heights in your career and be what you want to be.  We provide:

• Comprehensive health benefits that start day 1
• Student Loan Repayment Assistance & Reimbursement Programs
• Family-focused benefits
• Wellness incentives

Ongoing mentorship, development, leadership programs...and more!

 

*One day per week onsite*

Description

Emory Healthcare is seeking an experienced and highly skilled Senior SCCM OSD / Intune Engineer to join the Windows Endpoint Engineering team. This senior-level role is responsible for architecting, implementing, and maintaining enterprise endpoint management solutions with deep expertise in Microsoft System Center Configuration Manager (SCCM) Operating System Deployment (OSD) and Microsoft Autopilot-driven modern provisioning via Microsoft Intune. 

As a senior contributor, this individual will serve as a subject matter expert across the full endpoint lifecycle — from zero-touch Autopilot provisioning to complex task sequence development, co-management strategy, and cloud-first modernization. The role requires independent ownership of critical engineering workstreams and the ability to influence platform direction across a fleet of 30,000+ endpoints in a large, complex healthcare environment. 

This position requires one onsite day per week at our Emory Northlake Campus and includes participation in after-hours maintenance and an on-call rotation supporting critical Tier 1 clinical environments. 

RESPONSIBILITIES:

OSD and Imaging Architecture: 

• Design, build, and maintain advanced SCCM task sequences for wipe-and-load, in-place upgrade, and bare-metal OSD scenarios across clinical and administrative endpoint personas 
• Manage the full imaging pipeline including DEV, TST, and PRD environments aligned to monthly Patch Tuesday cadence 
• Develop and maintain driver and firmware management strategies for Dell and specialty clinical hardware including radiology, cardiology, and WOW devices 
• Architect and enforce persona-based imaging standards (DSK, RAD, CAR) to reduce image sprawl and standardize endpoint builds across the enterprise 
• Lead validation and quality assurance processes for new image releases, coordinating with field technicians and clinical stakeholders 

Autopilot and Modern Provisioning:

• Architect and operationalize Windows Autopilot at scale for both new hardware enrollment and conversion of existing SCCM-managed devices
• Develop and maintain automated hardware hash collection and upload workflows using PowerShell and the Microsoft Graph API 
• Design zero-touch or near-zero-touch provisioning workflows for clinical environments, accounting for VPN dependencies, Imprivata integration, and domain join requirements 
• Lead co-management configuration and workload migration strategy, defining the path from SCCM-primary to Intune-first endpoint management 
• Build and maintain Autopilot deployment profiles, enrollment status page (ESP) configurations, and device group targeting in Entra ID 

Intune and Cloud Endpoint Management: 

• Develop and manage Win32 app packaging, deployment, and supersedence logic in Intune for clinical and administrative applications
• Administer compliance policies, configuration profiles, and Settings Catalog policies in Intune across hybrid-joined and Entra-joined endpoints 
• Manage BitLocker, LAPS, and Windows Hello for Business configurations through Intune for endpoint security compliance 
• Configure and maintain Windows Autopatch or equivalent patching strategies through Intune for cloud-managed devices 
• Troubleshoot Intune enrollment failures, policy conflicts, and Win32 app deployment issues at scale 

Patch Management and Third-Party Application Lifecycle: 

• Own Windows and third-party patch management operations using SCCM and Patch My PC (PMPC) across 30,000+ endpoints 
• Design and maintain ring-based patch deployment strategies with appropriate deferral windows for clinical environments 
• Monitor patch compliance across the fleet and produce reporting for engineering leadership and CISO-level stakeholders 
• Evaluate and recommend application packaging standards, supersedence strategies, and lifecycle processes for third-party software 

Identity, Security, and Clinical Integration: 

• Maintain and troublesho