Support and Administrators for Intune, Defender- (remote from Europe)

Position Overview

We are looking for an intermediate level profile for daily operational support and administration for Microsoft cloud services such as SharePoint, OneDrive, Intune, Defender.

Responsibilities

• Handle incoming tickets, create documentation on the existing infrastructure, and support the Platform Manager creating governance policies, monitor and change management of new features released by Microsoft.
• Collaborate with administrators of other Microsoft 365 services to ensure smooth platform operations.
• Efficiently manage and resolve daily support tickets related to Microsoft services, ensuring timely and effective issue resolution.
• Monitor platform performance and escalate issues when necessary, with Microsoft.
• Workload report and ongoing tasks within the team meetings (weekly).
• Use PowerShell to update system configurations when applicable.
• Create and maintain documentation of the current infrastructure.
• Ensure documentation is up-to-date and accessible to relevant stakeholders.
• Update documentation based on the new features released by Microsoft, including material for change management.
• Provide ongoing technical and operational support to the Platform Managers.
• Assist in platform migrations and configuration changes.
• Administer SharePoint, OneDrive, Intune, Defender, Purview and Copilot.
• Coordinate with administrators of other Microsoft 365 services (e.g., Teams, OneDrive, Exchange) to ensure integrated platform support.
• Participate in cross-functional meetings and contribute to platform-wide initiatives.
• Handle tickets of other Microsoft services introduced under the responsibility of Digital Workplace service (e.g. Microsoft Bookings, Viva Insight, Purview or other Microsoft 365 applications).
• Identify opportunities for automation and process optimisation.
• Propose improvements to enhance user experience and platform efficiency.

Required Expertise

Endpoint Management – Microsoft Intune

• Design and implement device enrollment strategies (Autopilot, BYOD, corporate-owned).
• Create and maintain compliance policies (e.g., encryption, OS version, secure boot).
• Configure and deploy configuration profiles (Wi-Fi, VPN, certificates, security baselines).
• Package and deploy applications (Win32, Microsoft Store, LOB apps).
• Implement and manage Windows Update rings and feature update policies.
• Troubleshoot device compliance, enrollment failures, and policy conflicts.
• Implement Conditional Access integration with Intune compliance.
• Support mobile device management (iOS/Android) including app protection policies.

Security Operations – Microsoft Defender Suite

• Configure and manage Microsoft Defender for Endpoint policies.
• Investigate and respond to security incidents and alerts.
• Perform threat hunting using advanced hunting queries (KQL).
• Tune detection rules to reduce false positives.
• Implement and manage attack surface reduction (ASR) rules.
• Configure device control policies (USB, removable media).
• Integrate Defender with Intune and Conditional Access.
• Produce security reports and recommend improvements.
• Support vulnerability management and remediation tracking.

Virtual Desktop – Azure VDI

• Design and deploy Azure Virtual Desktop (AVD) environments.
• Configure host pools, application groups, and workspaces.
• Optimize session host performance (FSLogix profiles, scaling).
• Implement image management strategy (golden image, updates).
• Configure identity integration.