Ascendion→
Network Admin/Engineer at Ascendion in Bengaluru, Karnataka, IN
Skills
Job Description
L3 Endpoint Device Management (EDM) – SCCM & Intune Engineer
Job Summary
We are seeking a highly experienced L3 Endpoint Device Management (EDM) Engineer/Architect responsible for the design, architecture, automation, security, and lifecycle management of enterprise endpoint platforms. The role will provide technical leadership for Microsoft Intune, SCCM (MECM), Windows Enterprise platforms, endpoint security, application delivery, and hybrid device management initiatives. The candidate will drive platform strategy, technical standards, automation, and modernization efforts while supporting large-scale enterprise environments.
Key Responsibilities
Lead the architecture, design, and governance of enterprise endpoint management platforms including Microsoft Intune and SCCM (MECM).
Define endpoint lifecycle management standards covering provisioning, imaging, software deployment, patch management, compliance, and retirement processes.
Design and implement modern endpoint management solutions leveraging Intune, Autopilot, Co-Management, and Cloud Attach.
Develop and maintain enterprise automation frameworks using PowerShell.
Lead operating system deployment (OSD), application packaging, software distribution, and patch management strategies.
Architect endpoint security solutions using Microsoft Defender for Endpoint, Microsoft Certificate Authority, and security baselines.
Design and manage hybrid endpoint environments integrating Active Directory, Microsoft Entra ID, Azure Arc, SCCM, and Intune.
Provide technical leadership for vulnerability remediation programs in partnership with security teams using Tenable.io and Zafran.
Establish monitoring, reporting, compliance, and endpoint health dashboards.
Support enterprise desktop virtualization platforms including Citrix Virtual Apps and Desktops.
Drive root cause analysis and resolution of complex endpoint and infrastructure issues.
Define operational standards, SOPs, governance controls, and best practices.
Lead major endpoint transformation initiatives, platform upgrades, migrations, and modernization programs.
Provide L3 escalation support for critical incidents and complex technical issues.
Technical Skills
Endpoint Management Platforms
Microsoft Intune
Microsoft Endpoint Configuration Manager (SCCM/MECM)
Windows Autopilot
Co-Management
Cloud Attach
Windows Update for Business (WUfB)
Endpoint Analytics
Operating Systems & Endpoint Platforms
Windows 10/11 Enterprise
Dell Endpoint Management
Lenovo Commercial Device Management
Device Lifecycle Management
Driver & Firmware Management
Automation & Scripting
PowerShell Automation
Task Sequence Automation
Endpoint Provisioning Automation
Configuration Baseline Automation
Security & Compliance
Microsoft Defender for Endpoint
Microsoft Certificate Authority (PKI)
Endpoint Security Baselines
Conditional Access Integration
Device Compliance Policies
BitLocker Administration
Vulnerability Remediation
Identity & Hybrid Management
Microsoft Entra ID (Azure AD)
Active Directory
Azure Arc
Hybrid Join
Group Policy Management
Server & Core Infrastructure Services
DNS
DHCP
SMB/File Services
Print Services
IIS Administration
Virtualization & VDI
Citrix Virtual Apps & Desktops
Citrix XenServer
Application Virtualization
Profile Management
Vulnerability & Risk Management
Tenable.io
Zafran
Security Patch Management
Risk-Based Vulnerability Prioritization
Monitoring & Reporting
SCCM Reporting
Intune Reporting
Power BI (Preferred)
Endpoint Compliance Reporting
Patch Compliance Dashboards
Preferred Experience
7+ years of experience supporting enterprise endpoint management platforms.
5+ years of experience administering SCCM and Intune environments.
Experience managing 10,000+ endpoints in global enterprise environments.
Experience with endpoint modernization and migration projects.
Experience supporting manufacturing, healthcare, retail, or large enterprise environments.
Experience working within ITIL-based operational environments.