Desktop Engineer (Microsoft Intune)

About the Role

We are looking for an experienced Senior Desktop Automation Engineer to join our Infrastructure team and take ownership of endpoint automation, modern device management, and Windows desktop engineering across an enterprise environment.

This role is ideal for someone with strong PowerShell automation skills and hands-on experience with Microsoft Intune, Windows Autopilot, and Microsoft Graph API. You will be responsible for automating endpoint provisioning, software deployment, configuration management, compliance, and security while reducing manual administration through scripting and configuration-as-code practices.

Key Responsibilities

Desktop & Endpoint Automation

• Design, develop, and maintain PowerShell automation for endpoint provisioning, configuration, software deployment, and lifecycle management.
• Build and maintain automation for endpoint remediation using Microsoft Intune Proactive Remediations.
• Package, test, and deploy Win32 applications through Microsoft Intune.
• Develop automation using Microsoft Graph API for bulk administration, reporting, and policy management.
• Maintain version-controlled automation scripts and configuration-as-code for endpoint management.

Microsoft Intune & Endpoint Management

• Administer Microsoft Intune and Microsoft Endpoint Manager in a production environment.
• Manage Windows Autopilot deployments for zero-touch device provisioning.
• Configure and maintain compliance policies, configuration profiles, update rings, application deployments, and device assignments.
• Troubleshoot device enrollment, policy application, and application deployment issues.
• Support Android Enterprise device management, including Corporate-Owned Work Profile (COPE) and BYOD deployments.

Active Directory & Identity

• Support Active Directory and Group Policy administration for hybrid environments.
• Assist with Hybrid Azure AD Join and Entra ID integration.
• Manage computer objects, organizational units, and security group-based targeting.
• Work closely with identity teams on cloud migration and modern endpoint management initiatives.

Security & Compliance

• Implement and maintain endpoint security policies using Microsoft Intune.
• Manage BitLocker encryption, Microsoft Defender for Endpoint, firewall policies, and security baselines.
• Support Conditional Access compliance and endpoint security reporting.
• Coordinate Windows and third-party application patch management.

Documentation & Collaboration

• Create and maintain technical documentation, runbooks, and standard operating procedures.
• Collaborate with infrastructure, security, identity, and service desk teams.
• Mentor junior engineers on PowerShell scripting and Intune best practices.
• Provide Level 3 support and act as an escalation point for complex endpoint issues.

Required Skills & Experience

• 6–9 years of experience in Desktop Engineering, End User Computing, or Endpoint Management.
• Strong hands-on experience with Microsoft Intune / Microsoft Endpoint Manager.
• Advanced PowerShell scripting and automation experience.
• Experience with Microsoft Graph API for Intune or Microsoft 365 automation.
• Strong knowledge of Windows Autopilot deployment.
• Experience packaging and deploying Win32 applications.
• Hands-on experience with Active Directory, Group Policy, and Hybrid Azure AD Join.
• Experience managing Android Enterprise devices within Intune.
• Good understanding of Microsoft Defender for Endpoint, BitLocker, Conditional Access, and endpoint security best practices.
• Experience troubleshooting endpoint provisioning, configuration, compliance, and software deployment issues.
• Strong documentation, analytical, and problem-solving skills.

Technical Skills

Endpoint Automation

• PowerShell
• PowerShell DSC
• Microsoft Graph API
• Proactive Remediations
• Win32 Application Packaging

Endpoint Management

• Microsoft Intune
• Microsoft Endpoint Manager
• Windows Autopilot
• Configuration Profiles
• Compliance Policies
• Update Rings
• Application Deployment

Identity & Directory Services

• Active Directory
• Group Policy
• Microsoft Entra ID (Azure AD)
• Hybrid Azure AD Join

Mobile Device Management

• Android Enterprise
• Corporate-Owned Work Profile (COPE)
• BYOD
• App Configuration Policies

Security

• Microsoft Defender for Endpoint
• BitLocker
• Attack Surface Reduction
• Conditional Access
• Endpoint Security Baselines

Platforms

• Windows 10
• Windows 11
• Windows Server
• Microsoft 365
• Microsoft Intune
• Microsoft Entra ID

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft 365 Certified: Administrator Expert (MS-102)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)

What We're Looking For

• Automation-first mindset with a passion for improving operational efficiency.
• Strong troubleshooting and analytical skills.
• Excellent communication and documentation abilities.
• Ability to work collaboratively across infrastructure, security, and identity teams.
• Self-driven professional with a proactive approach to continuous improvement.

Pay: AED10,000.00 - AED15,000.00 per month

Experience:

• Endpoint Management: 5 years (Preferred)
• Desktop Engineering: 5 years (Preferred)
• Active Directory: 3 years (Preferred)
• Microsoft Intune: 3 years (Preferred)

License/Certification:

• Endpoint Administrator Associate (MD-102) (Preferred)

Work Location: In person