Endpoint Administrator (Intune, Defender) - remote from Europe

Role Overview

We are looking for an intermediate level profile for daily operational support and administration for Microsoft cloud services such as SharePoint, OneDrive, Intune, Defender. The roles involve handling incoming tickets, creating documentation on the existing infrastructure, and supporting the Platform Manager creating governance policies, monitor and change management of new features released by Microsoft. The contractors will also collaborate with administrators of other Microsoft 365 services to ensure smooth platform operations.

Daily Operations and Ticket Management

• Efficiently manage and resolve daily support tickets related to the Microsoft services, ensuring timely and effective issue resolution.
• Monitor platform performance and escalate issues when necessary, with Microsoft.
• Workload report and ongoing tasks within the team meetings (weekly).
• Use of PowerShell to update system configurations when applicable.

Documentation

• Create and maintain documentation of the current infrastructure.
• Ensure documentation is up-to-date and accessible to relevant stakeholders.
• Update documentation based on the new features released by Microsoft, including material for change management.

Platform Support

• Provide ongoing technical and operational support to the Platform Managers.
• Assist in platform migrations and configuration changes.

Administration of Microsoft 365 Platforms

• Administer SharePoint, OneDrive, Intune, Defender, Purview and Copilot.
• Coordinate with administrators of other Microsoft 365 services (e.g., Teams, OneDrive, Exchange) to ensure integrated platform support.
• Participate in cross-functional meetings and contribute to platform-wide initiatives.
• Handle tickets of other Microsoft services that are introduced under the responsibility of Digital Workplace service (e.g. Microsoft Bookings, Viva Insight, Purview or other Microsoft 365 applications).

Continuous Improvement

• Identify opportunities for automation and process optimisation.
• Propose improvements to enhance user experience and platform efficiency.

Specific Expertise - Endpoint Management (Microsoft Intune)

• Design and implement device enrollment strategies (Autopilot, BYOD, corporate owned).
• Create and maintain compliance policies (e.g., encryption, OS version, secure boot).
• Configure and deploy configuration profiles (Wi-Fi, VPN, certificates, security baselines).
• Package and deploy applications (Win32, Microsoft Store, LOB apps).
• Implement and manage Windows Update rings and feature update policies.
• Troubleshoot device compliance, enrollment failures, and policy conflicts.
• Implement Conditional Access integration with Intune compliance.
• Support mobile device management (iOS/Android) including app protection policies.

Specific Expertise - Security Operations (Microsoft Defender Suite)

• Configure and manage Microsoft Defender for Endpoint policies.
• Investigate and respond to security incidents and alerts.
• Perform threat hunting using advanced hunting queries (KQL).
• Tune detection rules to reduce false positives.
• Implement and manage attack surface reduction (ASR) rules.
• Configure device control policies (USB, removable media).
• Integrate Defender with Intune and Conditional Access.
• Produce security reports and recommend improvements.
• Support vulnerability management and remediation tracking.

Specific Expertise - Virtual Desktop (Azure VDI)

• Design and deploy Azure Virtual Desktop (AVD) environments.
• Configure host pools, application groups, and workspaces.
• Optimize session host performance (FSLogix profiles, scaling).
• Implement image management strategy (golden image, updates).
• Configure identity integration.