Intune Engineer

Accenture Flex offers you the flexibility of local fixed-duration project-based work powered by Accenture, a leading global professional services company. Accenture is consistently recognized on FORTUNEs 100 Best Companies to Work For and Diversity Incs Top 50 Companies For Diversity lists.

As an Accenture Flex employee, you will apply your skills and experience to help drive business transformation for leading organizations and communities. In addition to delivering innovative solutions for Accentures clients, you will work with a highly skilled, diverse network of people across Accenture businesses who are using the latest emerging technologies to address todays biggest business challenges.

You will receive competitive rewards and access to benefits programs and world-class learning resources. Accenture Flex employees work in their local metro area onsite at the project, significantly reducing and/or eliminating the demands to travel.

Key Responsibilities:

• Microsoft Intune:
• Deep hands-on experience with device compliance, application deployment, software updates, endpoint protection, and policy management.
• Device enrolment, corporate and personal/BYOD device scenarios, automated provisioning for Windows, iOS, Android, including zero-touch enrolments for iOS and Android platforms, web-based device enrolment for iOS.
• Device configuration including creating custom configuration profiles.
• Shared and Kiosk device scenarios, Windows and mobile device platforms.
• Certificate deployments, PKCS and SCEP.
• Deploying VPN, email, and Wi-Fi profiles.
• Device Compliance, including custom compliance and integration with Defender for Endpoint for device risk, ConfigMgr compliance with Conditional Access.
• Assignment filters for managed apps and devices.
• Applications, Store apps, M365 apps, Edge, LoB, and Win32.
• Integration with Apple Business Manager and Google Play Store.
• Intune Diagnostics:
• Creating Log Analytics Workspaces.
• Using KQL to create custom reports from Log Analytics data.
• Connectors and tokens.
• Configuration Manager Apple VPP tokens.
• Managed Google Play.
• Firmware over-the-air update.
• MDT connectors - (Windows Security and awareness of 3rd party capabilities).
• Certificate connectors.
• Active Directory SIM configuration, awareness of platform-specific limitations.
• Autopilot & Provisioning:
• Expertise in configuring and validating Windows Autopilot profiles, OEM provisioning, and troubleshooting deployment issues.
• Experience with all Autopilot deployment scenarios, user-driven, pre-provisioning, self-deploying, Autopilot Reset, and Autopilot for existing devices.
• Enrolment Status Page - configuring and experience troubleshooting.
• Autopilot Device Preparation.
• MDM/MAM Policies:
• Strong understanding of mobile device and application management, including conditional access, compliance policies, and certificate-based authentication.
• App configuration profiles.
• App protection profiles.
• Experience configuring Intune and Conditional Access for BYOD scenarios.
• Windows 10/11 Management:
• Proven experience with provisioning, servicing, and customizing Windows installations using Intune.
• Windows Updates, Update Rings, Feature Updates, Quality Updates, and driver updates.
• Monitoring and reporting including Windows Update for Business Reports.
• Autopatch, Autopatch Groups, onboarding, and monitoring.
• Scripts and remediations.
• Endpoint Analytics, Group Policy Analytics.
• Endpoint Security.
• BitLocker management, including self-service recovery key options.
• AV and Firewall configuration.
• LAPS, automated and manual configuration.
• Windows Hello for Business (client configuration), managing local admins group.
• Configuring Credential Guard.
• Endpoint detection and response, onboarding devices to MDE.
• Application Control.
• OneDrive for Business - configuration including integration with known folders, migration from file shares.
• Experienced with utilizing Windows Configuration Service Providers and creating custom configuration profiles.
• Intune Suite Experience:
• Experience with configuring Intune add-ons including:
• Endpoint Privilege Management.
• Remote Help.
• Advanced Analytics.
• Experience or awareness (ability to discuss at a high level) Microsoft Tunnel/Tunnel for MAM, Cloud PKI.
• Hybrid Cloud Management:
• Experience managing co-managed environments (Intune + ConfigMgr), including cloud management gateway setup and transition to cloud-only management.
• Entra ID:
• Firm understanding of the identity and authentication services dependencies from an Intune SME perspective, including:
• Creating dynamic groups, familiar with extension attributes.
• Experience with creating Conditional Access policies and creating inclusions/exclusions for filtered devices.
• Using sign-in logs for reporting and conditional access evaluation.
• Graph API.
• RBAC.

Applicant will have access to export-controlled material and must be a US person defined as a US citizen, US permanent resident, or has achieved refugee status or been granted asylum in the US.