> Markdown version of [/jobs/ext/4028602-intune-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/4028602-intune-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Intune/Endpoint Engineer

- **Company:** ePlus Technology, inc.
- **Location:** Richmond, VA, United States
- **Contract:** Contract
- **Skills:** Microsoft Windows, Android Software Development, Apple Push Notification Service, Apple IOS, Apple Mac Systems, Cloud Computing, Cloud Engineering, Configuration Management, Identity and Access Management, Interoperability, Microsoft Security Essentials, Windows API, Public Key Infrastructure, Azure Active Directory, Cloud Services, Software Deployment, Software Vulnerability Management, Software Distribution, Delivery Pipeline, Microsoft InTune, Deployment Automation, Apple Business Manager, Patch Management, SentinelOne Expertise
- **Published:** October 30, 2026
- **Apply:** https://www.dice.com/job-detail/5d4fceb5-b1bb-412d-9a6e-790788c86c32

## About the Role

· Advanced administration of Microsoft Configuration Manager (Current Branch) including site administration, client management, software distribution, operating system deployment, reporting, and troubleshooting.

· Advanced administration of Microsoft Intune for Windows, iOS, Android, and macOS device management.

· Experience with Microsoft Entra ID (Azure AD) device integration, identity management, application registrations, and cloud services.

· Experience managing co-managed environments using Configuration Manager and Intune.

Software Update and Patch Management

· Extensive experience managing Microsoft Configuration Manager Software Updates, including:

o Software Update Points (SUP)

o Automatic Deployment Rules (ADRs)

o Software Update Groups (SUGs)

o Deployment Packages

o Maintenance Windows

o Compliance Monitoring

o Content Cleanup and Lifecycle Management

· Experience administering Patch My PC in Configuration Manager and Intune environments.

· Knowledge of Microsoft 365 Apps servicing and update management.

· Experience monitoring monthly workstation and server patch deployments and remediation activities.

· Ability to investigate and resolve update synchronization, deployment, and compliance issues.

Cloud and Hybrid Endpoint Management

· Experience implementing and supporting Cloud Management Gateway (CMG).

· Experience managing internet-facing devices and servers located within DMZ environments.

· Understanding of hybrid and cloud-native endpoint management strategies.

· Familiarity with Microsoft Entra ID tenant management, cloud service integrations, and application secret/certificate lifecycle management.

Security and PKI Administration

· Strong knowledge of Public Key Infrastructure (PKI) concepts and certificate lifecycle management.

· Experience operating Configuration Manager in HTTPS mode using internal Certificate Authorities.

· Ability to manage certificate renewals, trusted root/intermediate certificates, and Distribution Point certificate requirements.

· Experience supporting security hardening and vulnerability management initiatives.

· Familiarity with Microsoft security and compliance best practices.

Operating System Deployment (OSD)

· Experience creating, maintaining, and troubleshooting:

o Task Sequences

o Boot Images

o Driver Packages

o OS Images

o Operating System Deployments

· Experience updating Windows installation media and maintaining deployment readiness.

· Experience supporting enterprise hardware lifecycle management and onboarding new device models.

· Familiarity with Driver Automation Tool (DAT) and modern driver management methodologies.

Application Packaging and Deployment

· Experience packaging and deploying applications using:

o Microsoft Configuration Manager

o Microsoft Intune

o PSAppDeployToolkit (PSADT)

· Ability to package Win32 applications and maintain deployment workflows.

· Experience deploying third-party security and management tools such as:

o SentinelOne

o Tenable

o BeyondTrust Jump Client

o Sysmon

· Ability to update task sequences and deployment strategies as application requirements evolve.

Endpoint Compliance and Device Management

· Experience creating and maintaining:

o Device Collections

o Queries

o Configuration Profiles

o Compliance Policies

o Assignment Filters

o Dynamic Device Grouping

· Experience supporting Windows, iOS, Android, and macOS platforms.

· Understanding of Conditional Access and endpoint compliance concepts.

· Experience monitoring deployment success and remediation efforts.

Microsoft Intune Administration

· Administration of:

o Configuration Profiles

o Compliance Policies

o Application Deployments

o Platform Scripts

o Proactive Remediations

o Device Enrollment

o Device Lifecycle Management

· Experience managing Apple MDM integrations, including:

o Apple Push Notification Service (APNs) certificates

o Apple Business Manager (ABM)

o Apple enrollment programs

· Ability to maintain mobile device and endpoint management infrastructure.

## Description

This 6-month, contract-to-hire position has a hybrid schedule, with 3 days a week onsite in Richmond, VA. This is a W2 position with benefits and PTO available during the contract period.