Senior Intune Endpoint Security Engineer

Job Description

Senior Intune Endpoint Security Engineer
On behalf of our aviation sector client, Procom is searching for a Senior Intune Endpoint Security Engineer for a short-term contract role. This position is a hybrid position with 3 days onsite at our client’s Calgary office.

Senior Intune Endpoint Security Engineer - Job Description:
This project involves the implementation of Windows endpoint hardening standards using Microsoft Security Baselines and CIS Benchmark recommendations. The role requires driving the migration of legacy Active Directory Group Policies to Microsoft Intune Configuration Profiles, Security Baselines, Settings Catalog, Administrative Templates, Compliance Policies, and Endpoint Security policies. 

Senior Intune Endpoint Security Engineer - Responsibilities:
• Review current endpoint security posture against Microsoft Security Baselines.
• Review CIS Benchmark recommendations and categorize controls by risk, complexity, and business impact.
• Develop phased implementation plans for CIS controls.
• Document approved exceptions and compensating controls.
• Establish governance processes for future baseline maintenance.
• Inventory and analyze existing GPOs.
• Identify duplicate, conflicting, deprecated, and legacy policies.
• Map GPO settings to Intune Settings Catalog, Administrative Templates, Endpoint Security Policies, Security Baselines, and Compliance Policies.
• Design modular Intune configuration profiles.
• Validate policy parity between GPO and Intune.
• Establish baseline profile structure and naming conventions.
• Create policy deployment rings and testing methodology.
• Implement change control and rollback processes.
• Create operational runbooks and support documentation.
• Define ongoing governance for security configuration management.


Senior Intune Endpoint Security Engineer - Mandatory Skills:
• 5+ years Microsoft Intune engineering experience
• 10+ years enterprise endpoint management experience
• Experience migrating large environments from GPO to Intune
• Experience implementing Microsoft Security Baselines
• Experience implementing CIS benchmark recommendations
• Experience designing configuration profiles from benchmark requirements
• Strong PowerShell scripting skills


Senior Intune Endpoint Security Engineer – Nice-to-Have Skills:
• Experience in airline, transportation, healthcare, finance, or other highly regulated environments
• Experience supporting operational/field devices
• Experience with kiosk/shared devices
• Experience with Teams Rooms or specialized endpoint devices
• Experience with ConfigMgr modernization programs


Senior Intune Endpoint Security Engineer – Assignment Length:
This is approximately a 3-month engagement.


Senior Intune Endpoint Security Engineer - Start Date:
ASAP


Senior Intune Endpoint Security Engineer - Assignment Location:
Calgary, Alberta, Canada. This is a hybrid role requiring 3 days in the office.