Job description
******This is a NINE (9) Month Assignment; however, history has shown that these migrations may continue beyond that timeline*****
GESis seeking an experienced Staff Unified Endpoint Management (UEM) Engineer to join our Defense Enclave Services (DES) team, who will support an extensive digital modernization program critical to Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies. The Staff UEM Engineer willbe responsible fordesigning, implementing, andoptimizingMicrosoft Intune solutions, for migration from MECM and AD joined devices to Azure AD joined and Intune Managed. They will develop Intune policies,utilizingexisting Active Directory group policies and work closely with cross-functional teams to architect and deliver robust, scalable, and secure solutions.
Primary Responsibilities
List daily duties and/or specific job responsibilities.
Design and implement Microsoft Intune-based solutions that align with user needs, security requirements, and enterprise standards
Package, deploy, and maintain applications using Intune, with a focus on automation, version control, and user experience
Create and manage Intune policies for application deployment, device compliance, security configurations, and configuration profiles
Ensure seamless integration with Microsoft 365 services, including Defender for Endpoint, Conditional Access, and Autopilot
Design and deploy Windows 10 and 11 provisioning workflows using Intune, Autopilot, ESP, and dynamic provisioning techniques
Configure and manage Windows Update for Business (WUfB) policies to ensure timely and secure OS updates
Maintain and evolve standardized Windows 10 and 11 deployment images,leverageboth cloud-native and traditional imaging strategies.
Collaborate with infrastructure teams to transition Group Policy Objects (GPOs) to modern Intune equivalents (e.g., Settings Catalog, ADMX-backed policies)
Work closely with the Active Directory and SCC teams to ensure SCCM readiness and alignment with broader infrastructure goals
Implement security best practices and compliance frameworks within Intune, including endpoint protection, encryption, and data loss prevention
Monitor and respond to security incidents related to mobile devices and endpoints, integrating with SIEM and SOC workflows
Continuously evaluate and improve endpoint management processes, proposing innovative solutions and communicating effectively with leadership
Develop and maintain comprehensive documentation for Intune configurations, provisioning processes, legacy GPO mappings, and SCCM coexistence strategies
Required Qualifications:
Bachelor’s degree and 8-12 years of prior relevant experience orMaster’sdegree with 6-10 years of prior relevant experience
Active DoD Secret clearance
Experience migrating users and desktops to Microsoft Intune
Experience packaging applications using Microsoft Intune
Experience writing and troubleshooting Power Shell scripts
Experience working directly with customer and other stakeholders to interpret requirements / feedback and report status
Excellent written and verbal communication skills, a demonstrated ability to meet deadlines, and a strong problem-solving mindset
Familiarity with the Atlassian suite, including Jira and Confluence
Current IAT Level II (or higher) Certification such as Security + or CISSP
Desired Qualifications:
Relevant certifications, such as Microsoft Certified Intune Expert
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.