Intune Architect

Job Title:Intune ArchitectJob DescriptionWe're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year.We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.Join us and be part of this journey towards greater opportunities and brighter futures.Role requirements:Fluent French / English oral and written communication.Strong technical writing, presentation and training skills.Technical requirements:Microsoft Intune: Deep hands-on experience with device compliance, application deployment, software updates, endpoint protection, and policy management. Device enrolment, corporate and personal/BYOD device scenarios, automated provisioning for Windows, IoS, Android, including zero-touch enrolments for IoS and Android platforms, web-based device enrolment for IoS Device configuration including creating custom configuration profiles Shared and Kiosk device scenarios, Windows and mobile device platforms Certificate deployments, PKCS and SCEP. Deploying VPN, email and Wi-Fi profile Device Compliance, including custom compliance and integration with Defender for Endpoint for device risk, ConfigMgr compliance. Compliance with Conditional Access Assignment filters for managed apps and devices Applications,Store apps, M365 apps, Edge, LoB and Win32.Integration with Apple Business Manager and Google Play store Intune DiagnosticsCreating Log Analytics WorkspacesUsing KQL to create custom reports from Log Analytics data Connectors and tokensConfiguration ManagerApple VPP tokensManaged Google PlayFirmware over-the-air updateMDT connectors – (Windows Security and awareness of 3rd party capabilities)Certificate connectorsActive Dir eSIM configuration, awareness of platform specific limitationsAutopilot & Provisioning: Expertise in configuring and validating Windows Autopilot profiles, OEM provisioning, and troubleshooting deployment issues. Entra and Hybrid Entra scenarios Experience with all Autopilot deployment scenarios, user-driven, pre-provisioning, self-deploying, Autopilot Reset and Autopilot for existing devices Enrolment Status Page – configurating and experience troubleshooting Autopilot Device PreperationMDM/MAM Policies: Strong understanding of mobile device and application management, including conditional access, compliance policies, and certificate-based authentication. App configuration profiles App protection profiles Experience configuring Intune and Conditional Access for BYOD scenariosWindows 10/11 Management: Proven experience with provisioning, servicing, and customising Windows installations using Intune Windows Updates, Update Rings, Feature Updates, Quality Updates and driver updates. Monitoring and reporting including Windows Update for Business Reports Autopatch, Autopatch Groups, onboarding and monitoring Scripts and remediations Endpoint Analytics, Group Policy Analytics Endpoint SecurityBitlocker management, including self-service recovery key optionsAV and Firewall configurationLAPS, automated and manual configurationWindows Hello for Business (client configuration)managing local admins groupConfiguring credential guardEndpoint detection and response, onboarding devices to MDEApplication Control OneDrive for Business – configuration including integration with known folders, migration from file shares Experienced with utilizing Windows Configuration Service Providers and creating custom configuration profiles.Intune SuiteExperience with configuring Intune add-ons including; Endpoint Privilege Management Remote Help Advanced Analytics Experience or awareness (ability to discuss at a high level) Microsoft Tunnel/Tunnel for MAM, Cloud PKIHybrid Cloud Management: Experience managing co-managed environments (Intune + ConfigMgr), including cloud management gateway setup and transition to cloud-only management.Entra IDFirm understanding of the identify and authentication services dependencies from an Intune SME perspective, including; Creating dynamic groups, familiar with extension attributes Experience with creating Conditional Access polities and creating inclusions/exclusions for filtered devices Using sign-in logs for reporting and conditional access evaluationGraph API Experience with using Graph Explorer and PowerShell to address bespoke device management or reporting scenariosRBAC Creating custom roles, permissions and scope tags based on principles of least privilege access. Understating roles and responsibilities and how these can be implemented with RBAC. Familiar with the Entra roles with Intune access and using Entra ID PIM for Intune role elevationLocation:MAR - Work-At-HomeLanguage Requirements:Time Type:Full timeIf you are a California resident, by submitting your information, you acknowledge that you have read and have access to the Job Applicant Privacy Notice for California ResidentsR1668756