Senior Endpoint Migration Engineer

The Senior UEM Engineer will be responsible for designing, implementing, and optimizing Microsoft Intune solutions, for migration from MECM and AD joined devices to Azure AD joined and Intune Managed. They will develop Intune policies, utilizing existing Active Directory group policies and work closely with cross-functional teams to architect and deliver robust, scalable, and secure solutions. Primary Responsibilities

• Design and implement Microsoft Intune-based solutions that align with user needs, security requirements, and enterprise standards
• Package, deploy, and maintain applications using Intune, with a focus on automation, version control, and user experience
• Create and manage Intune policies for application deployment, device compliance, security configurations, and configuration profiles
• Ensure seamless integration with Microsoft 365 services, including Defender for Endpoint, Conditional Access, and Autopilot
• Design and deploy Windows 10 and 11 provisioning workflows using Intune, Autopilot, ESP, and dynamic provisioning techniques
• Configure and manage Windows Update for Business (WUfB) policies to ensure timely and secure OS updates
• Maintain and evolve standardized Windows 10 and 11 deployment images, leverage both cloud-native and traditional imaging strategies.
• Collaborate with infrastructure teams to transition Group Policy Objects (GPOs) to modern Intune equivalents (e.g., Settings Catalog, ADMX-backed policies)
• Work closely with the Active Directory and SCCM teams to ensure SCCM readiness and alignment with broader infrastructure goals
• Implement security best practices and compliance frameworks within Intune, including endpoint protection, encryption, and data loss prevention
• Monitor and respond to security incidents related to mobile devices and endpoints, integrating with SIEM and SOC workflows
• Continuously evaluate and improve endpoint management processes, proposing innovative solutions and communicating effectively with leadership
• Develop and maintain comprehensive documentation for Intune configurations, provisioning processes, legacy GPO mappings, and SCCM coexistence strategies

• Bachelor’s degree and 4-8 years of prior relevant experience or Master’s degree with 2-6 years of prior relevant experience. Specific experience, education and training may be considered in lieu of degree.
• Active DoD Secret clearance
• Experience migrating users and desktops to Microsoft Intune
• Experience packaging applications using Microsoft Intune
• Experience creating and troubleshooting task sequences for OS deployment
• Experience writing and troubleshooting Power Shell scripts
• Experience working directly with customer and other stakeholders to interpret requirements / feedback and report status
• Excellent written and verbal communication skills, a demonstrated ability to meet deadlines, and a strong problem-solving mindset
• Familiarity with the Atlassian suite, including Jira and Confluence
• Current IAT Level II (or higher) Certification such as Security + or CISSP

Relevant certifications, such as Microsoft Certified Intune Expert Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Compensation and Benefits Salary Range: $110,000-$155,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.) Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs. Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients’ missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT’s experienced workforce and our commitment to ensuring we meet and exceed our clients’ expectations.