IT Security Engineer - Intune and Mobile Security Lead - Full Time, Days (Remote)

The Intune and Mobile Security Lead is responsible for the design, deployment, and ongoing management of the organization’s Microsoft Intune-based endpoint management platform and mobile device security program. This role serves as the subject matter expert for all managed endpoints - including Windows workstations, iOS/Android mobile devices, and shared clinical devices - ensuring compliance with healthcare regulatory requirements (HIPAA, HITECH) and alignment with the organization’s security framework. The ideal candidate bridges technical depth with a security-first mindset and operates effectively across a complex, multi-facility healthcare environment., * EndpointMobile Device Management: Architect, deploy, and maintain Microsoft Intune (MEM) policies for Windows, iOS, Android, and macOS devices across all facilities

• SecurityCompliance: Develop and maintain mobile security baselines aligned with CIS Benchmarks, NIST 800-124, and HIPAA Security Rule requirements
• IdentityAccess Integration: Partner with the IdentityAccess Management team to align device compliance with Entra ID-based access controls and MFA policy enforcement
• ClinicalShared Device Support: Design and maintain enrollment and management strategies for shared clinical devices (kiosks, workstations-on-wheels, nurse call tablets)
• GovernanceOperations: Maintain the Intune environment health, including policy conflict resolution, update ring management, and feature update deferrals

Do you have experience in VPN management?, Do you have a Bachelor’s degree?, * 2+ years of hands-on Microsoft Intune / Microsoft Endpoint Manager administration in an enterprise environment

• Bachelor degree in Information Technology, Computer Science, Cybersecurity, or equivalent practical experience
• Certifications (Required or Expected Within 12 Months):
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)

Technical Skills:

• Strong proficiency with Microsoft Intune, Entra ID, Conditional Access, and Defender for Endpoint
• Hands-on experience with Windows Autopilot, Apple Business Manager, and Android Enterprise
• Working knowledge of PowerShell scripting and Microsoft Graph API for Intune automation
• Familiarity with co-management (Intune + MECM) architectures
• Understanding of PKI, certificate deployment via SCEP/PKCS, and VPN/Wi-Fi profile management