Senior Intune Specialist - Active Directory (5-8 yrs)

Mandatory Skills :

Intune/Azure AD - User Management :

- On boarding of new users.

- Assigning User Licenses to users for endpoint configuration.

- Create, edit or delete Azure Active Directory (AAD) User and Device groups.

- Intune/AAD - Application Creation and Deployment/Assignment

- Upload and Configure LOB applications (Windows, iOS and Android).

- Upload and Configure OEM Store applications (Microsoft, Apple and Google).

- Deploy LOB applications to endpoints.

- Deploy OEM Store applications to endpoints.

- Deploy LOB/Store applications to group of users (AAD user groups).

- Monitor application deployment status.

- Intune - Service Administration

- Assignment of subscriptions and licenses to users.

- Apple APN cert Management (renewal)

- Android for Work (Google), Apple Business Manager (Apple), Autopilot (Microsoft).

- Device settings configuration to enable Azure AD join (for Windows 10 devices)

- MDM auto enrollment configurations (for Windows 10 devices)

- Intune - Mobile Application Management

- LOB Application Wrapping for iOS and Android managed applications.

- Wrap the LOB apps using iOS SDK.

- Wrap the LOB apps using Android SDK.

- Intune - Device/Profile Management

- Create, Maintain, Update, Deploy and Delete policies

- Configuration policies like Device restrictions, Wi-Fi profile, domain join profile etc.

- Compliance Policies

- iOS, Android and Windows.

- Device Life Cycle

- Enrollment process of endpoints (iOS, Windows 10 and Android).

- Retire and Wipe Devices.

- AAD/Intune - Conditional Access

- Create, Maintain, Update, Deploy and Delete CA policies

- CA for Windows, Android, iOS, MacOS.

- Intune - Auto-Pilot

- Extensive experience in Design & implementation of Microsoft Endpoint Configuration Manager (MECM)/SCCM environment including Co-Management, CMG

- Extensive experience in designing and execute the technical implementation of Windows 10

- Autopilot\Modern Management solution using Intune, Azure AD, Office365 based on client requirements and design specifications.

- Production of High-level/Low Level Design documentations.

- Proficient in customizing and deploying Windows 10.

- Knowledge on Group Policy Objects, Active Directory security and compliancy configurations and

migrating to Intune CSP\ADMX templates.

- Experience in setting up Intune based Software Distribution, Patch Management, Windows as Service,

Driver Management processes.

- Configure Device Compliance, Conditional access and endpoint protection policies, Windows Defender, Bitlocker, Windows Hello for Business etc.

- Experience in Microsoft Azure AD, AzureAD AppProxy.

- In depth understanding with deployment technologies to include, but not limited to AD DS, AD FS, AAD Connect, Identity & Access Management, MFA, RMS, AIP

- Mobile Device Management and Mobile Application Management (MAM); protection and app restrictions on for Outlook and Office mobile apps on various mobile devices.