Overview
We are seeking a Microsoft Intune and Entra ID Engineer to lead the deployment and ongoing management of modern endpoint and identity solutions across multiple client environments. This role blends hands-on engineering with solution design, giving you ownership over client implementations while collaborating with senior architects on more complex initiatives. You will play a key role in delivering secure, scalable, cloud-native (Entra-joined) device environments for both corporate and BYOD use cases.
Key Responsibilities
- Lead deployment and management of Intune and Entra ID solutions across multiple client tenants
- Design and implement Entra-joined and hybrid device environments based on client needs
- Execute and own migrations from on-prem or hybrid AD to Entra ID
- Configure and optimize device compliance policies, configuration profiles, and security baselines
- Implement and manage Conditional Access, MFA, and identity security controls
- Lead Windows Autopilot deployments and modern device lifecycle strategies
- Design and support BYOD solutions using MAM and app protection policies
- Integrate and manage Microsoft Defender for Endpoint and related security tools
- Troubleshoot and resolve complex device, identity, and access issues (Tier 3)
- Contribute to standardization, templates, and best practices across client environments
- Automate routine tasks using PowerShell and/or Graph API
- Act as a technical point of contact for clients on endpoint and identity topics
- Mentor junior engineers and assist with escalations
- Maintain clear documentation and contribute to internal knowledge base
Required Qualifications
- 3–6 years of experience with Microsoft Intune and Entra ID (Azure AD)
- Proven experience deploying and managing Intune in production environments
- Strong understanding of Conditional Access, MFA, and Zero Trust principles
- Hands-on experience with Windows Autopilot and modern endpoint provisioning
- Experience supporting BYOD/MAM strategies
- Solid PowerShell skills for administration and automation
- Strong troubleshooting skills across identity, device compliance, and access issues
- Ability to manage multiple client environments and projects simultaneously
Preferred Qualifications
- Experience in an MSP or multi-tenant environment
- Microsoft certifications (MD-102, MS-102, SC-300, or similar)
- Experience with Microsoft Defender suite and M365 security tools
- Familiarity with Graph API and automation frameworks
- Exposure to compliance frameworks (HIPAA, SOC 2, CIS benchmarks)
Key Competencies
- Ability to take ownership of projects and drive them to completion
- Strong client-facing communication and consulting skills
- Balance of engineering execution and solution design thinking
- Organized and able to prioritize in a fast-paced MSP environment
- Security-first mindset with attention to detail
Pay: $80,000.00 - $85,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
Education:
Experience:
- M365 Entra and Intune management: 5 years (Required)
License/Certification:
- MD 102 -Intune & Endpoint Management (Preferred)
- SC-300 - Microsoft Entra Identity (Preferred)
Willingness to travel:
Work Location: Hybrid remote in Springville, UT 84663
