Role: Network Administrator (Intune and Endpoint Management)
Location: Martinez, CA
Duration: 8+ months
Pay Rate: $45 to $50
Overview:
The client is looking for an experienced Intune expert to lead its move to Microsoft Intune and modern endpoint management. The client is currently moving from Tanium and Jamf to Intune. This is a temporary assignment of about eight to nine months with a strong chance to make a visible impact on a large public sector environment of 3,000+ Windows devices and about 100 Macs and over 1,000 IPAD/IOS devices. The role is fully onsite, and both the interview and the work will be done in person in Martinez, CA.
Responsibilities:
- Assess the current Microsoft Intune, Entra ID, Apple Business Manager, Tanium, Jamf and certificate environments to identify gaps, risks and opportunities.
- Lead the design and ongoing management of Intune, including governance, role-based access controls, device enrollment, compliance policies, security baselines, app deployment, software updates and encryption.
- Design and maintain automated provisioning with Windows Autopilot, and with Apple Automated Device Enrollment for macOS, iOS and iPadOS devices.
- Plan and run the migration from Tanium and Jamf to Intune, including pilots, coexistence, rollback procedures and executive reporting.
- Drive the transition to passkeys and phishing resistant multifactor authentication using Conditional Access, registration campaigns, user communications and account recovery support.
- Package, test and deploy Windows and Apple applications, and provide advanced support for enrollment, compliance, OS updates, encryption and authentication issues.
- Mentor and train primary and secondary support staff to ensure smooth knowledge transfer.
- Create and maintain architecture standards, runbooks, troubleshooting guides and renewal calendars for certificates and applications.
- Partner with security and operations teams, and build metrics, compliance reports and service health dashboards.
Must Have:
- Expert level, hands on experience designing and managing Microsoft Intune at enterprise scale.
- Strong, hands-on Windows Autopilot experience (mandatory).
- Experience managing a large Windows environment (1,000+ devices).
- Working knowledge of Microsoft Entra ID, Conditional Access and phishing resistant MFA, including passkeys.
- Ability to package and deploy Windows and Apple applications.
- Strong documentation skills and the ability to train and mentor support staff.
- Ability to work onsite in Martinez, CA, including for the interview.
Good to Have:
- Apple Automated Device Enrollment (ADE) and Jamf experience (a plus).
- Experience migrating endpoints from Tanium or Jamf to Intune.
- Experience managing macOS, iOS and iPadOS devices, including Apple Business Manager.
- Windows Active Directory and Entra experience (desirable).
- Certificate management experience.
- Experience building compliance reports and service health dashboards.
- Prior experience in government or public sector environments.
- Traditional network administration background.
