Specialist, IT Infrastructure

The IT Infrastructure Specialist is responsible for engineering and supporting modern endpoint management solutions with a focus on Microsoft Intune and macOS platforms, delivering secure, compliant, automated, cloud-managed endpoint capabilities.

Responsibilities:
- Support end-to-end endpoint lifecycle across Windows and macOS (provisioning, configuration, patching, application delivery, retirement)
- Maintain Intune-based device management policies (compliance, configuration profiles, update rings, application deployment)
- Support macOS endpoint management using Intune
- Maintain standardized endpoint baselines (security hardening, encryption, Conditional Access/compliance requirements such as GxP where applicable)
- Use automation-first scripting (PowerShell, Bash/Zsh) for provisioning, configuration, and issue remediation
- Troubleshoot identity-driven access controls (Azure AD/Entra ID, Conditional Access, device compliance, M365 client configuration)
- Provide escalation support with root cause analysis and long-term fixes
- Use endpoint analytics/monitoring tools (e.g., Nexthink, Intune reporting) to improve device health, performance, and UX
- Collaborate with Security, Identity, Network, and Application teams
- Maintain technical documentation (runbooks, standards, knowledge articles) and support knowledge transfer to Service Desk/Tier 2
- Track and improve endpoint KPIs (compliance, patch success, encryption coverage, deployment success, MTTR)
- Contribute to roadmap execution by simplifying tooling and accelerating Intune adoption

Qualifications:
Required:
- Bachelor’s degree in IT/CS/Engineering (or equivalent)
- 4+ years in endpoint/desktop engineering or modern device management
- Hands-on Microsoft Intune experience (configuration, compliance, app deployment)
- Enterprise macOS lifecycle management and troubleshooting
- Apple Business Manager (ABM) and macOS provisioning workflows
- Strong troubleshooting across OS, application, identity, connectivity
- Azure AD/Entra ID experience (Conditional Access, device compliance)
- Scripting/automation (PowerShell, Bash, or shell scripting)
- ITSM process familiarity (incident, problem, change)
- Strong communication and documentation skills

Preferred:
- Jamf Pro experience and integration with Microsoft Intune
- Zero Touch provisioning experience (Windows Autopilot and macOS enrollment)
- Endpoint security controls experience (encryption, EDR, compliance posture) in Intune environments
- Nexthink/endpoint analytics experience
- Regulated environment experience (e.g., GxP)
- Experience with Intune migrations, tenant standardization, or legacy decommissioning