Senior engineer, microsoft intune (xico)

senior engineer – microsoft intune

we are seeking a highly skilled and operationally focused senior engineer – microsoft intune to lead the design, deployment, and ongoing management of enterprise endpoint solutions.

about the role

• design, deploy, and operate microsoft intune at enterprise scale across windows, macos, ios, and android platforms.
• manage windows autopilot v2, including device enrollment profiles, autopilot reset, and hybrid azure ad join configurations.
• build and maintain compliance policies, configuration profiles, and security baselines aligned with cis/nist benchmarks.
• own the full lifecycle of win32, msix, and lob application packaging, deployment, and updates within intune.
• develop intune remediation scripts and proactive detection packages using powershell to resolve endpoint drift at scale.
• administer mobile application management (mam) policies for both byod and corporate‑managed devices.
• manage entra id device objects, dynamic groups, and conditional access policies in collaboration with the iam team.
• oversee windows update for business rings and macos/ios update enforcement policies across the device fleet.
• integrate intune with microsoft defender for endpoint, sentinel, and additional security tooling to ensure unified endpoint protection.
• handle escalated device management tickets, perform root‑cause analysis, and implement permanent corrective actions.
• maintain comprehensive documentation, including runbooks, sops, known‑issue articles, and change records.

about you

• 5+ years of experience, mainly with enterprise microsoft intune administration.
• deep expertise in windows device management, including autopilot, hybrid azure ad join, co‑management with configmgr, and intune compliance policies.
• strong knowledge of entra id (azure ad), including device registration, dynamic groups, conditional access, and mfa policies.
• proven experience with win32 app packaging using intunewinapputil and familiarity with frameworks such as psadt.
• advanced powershell scripting skills, including detection and remediation scripts, microsoft graph api automation, and task scheduling.
• solid understanding of windows update for business, update rings, feature updates, and driver management strategies.
• experience managing bitlocker encryption and escrow through intune and microsoft defender for endpoint integration.
• familiarity with macos and ios/android mdm management within intune environments.
• experience handling tickets within itsm tools such as servicenow or jira service management, with strong sla adherence and documentation practices.
• an operations‑driven mindset with proactive monitoring, trend analysis, and a continuous improvement approach to endpoint management.

benefits

• hybrid work model: flexible hybrid working environment (2‑3 days a week in the office depending on the role) for office‑based roles while delivering a seamless experience that is digitally and physically connected.
• flexibility & work‑life balance: flex my way is a set of supportive workplace policies designed to manage personal and professional responsibilities, including caring for family, giving back to the community, or finding time to refresh and reset.
• work from anywhere for up to 8 weeks per year to support work‑life balance.
• career development and growth through continuous learning and skill development programs.
• comprehensive benefit plans including adaptable vacation, company‑wide mental health days off, access to the headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
• social impact opportunities: two paid volunteer days off annually and participation in pro‑bono consulting projects and esg initiatives.

equal employment opportunity statement

thomson reuters is proud to be an equal employment opportunity employer providing a drug‑free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law.