MDM Engineer

Take ownership of enterprise mobile device management and endpoint security administration, supporting Microsoft Intune, Microsoft Entra ID, and Apple device management integrations. This role focuses on advanced MDM administration, mobile security policy management, complex troubleshooting, and technical escalations while supporting platform improvements and a phased service transition.

What You’ll Do / Key Responsibilities

· Administer Microsoft Intune MDM platform and mobile security configurations.

· Manage device compliance, configuration, and app protection policies.

· Troubleshoot Microsoft Entra ID, MFA, and Conditional Access issues.

· Maintain Apple enrollment integrations, certificates, and tokens.

· Resolve complex device enrollment and security incidents.

· Support approved platform changes and technical improvements.

· Coordinate vendor and Smarsh integration escalations.

· Participate in incumbent knowledge transfer, technical documentation, and phased service takeover.

· Advanced Microsoft Intune administration and MDM platform support experience.

· Microsoft Entra ID administration experience.

· Hands-on experience with Conditional Access and MFA.

· Experience managing device compliance, configuration, and security policies.

· Knowledge of Mobile Application Management (MAM) and app protection policies.

· Experience with Apple Business Manager and Intune integration.

· Advanced MDM troubleshooting and technical escalation capabilities.

Preferred Qualifications

· Experience with Apple Push Notification service (APNs) certificates and enrollment tokens.

· Knowledge of Intune RBAC and administrator permissions.

· Experience with certificate-based authentication.

· Smarsh capture integration troubleshooting experience.

· Understanding of mobile carrier integration concepts.

· PowerShell and Microsoft Graph knowledge.

· Regulated industry security experience.

· Microsoft 365 Endpoint Administrator Associate (MD-102) certification.

· Microsoft Identity and Access Administrator (SC-300) certification.

Technical Environment

· Microsoft Intune / Microsoft Endpoint Manager

· Microsoft Entra ID

· Conditional Access and MFA

· Apple Business Manager / Automated Device Enrollment (ADE) / APNs

· Mobile Application Management (MAM)

· Microsoft Graph and PowerShell