Sr. Engineer — Systems - Job Listing

Essential Duties and Responsibilities:
- Design, implement, and maintain enterprise Intune infrastructure, including configuration profiles, compliance policies, conditional access, and application management at scale.
- Architect manage Windows Autopilot deployment solutions across the organization, including profile design, device registration, and integration with Entra ID and Intune.
- Plan and execute migrations from on‑premises or hybrid endpoint management environments (MECM/GPO) to a modern Intune‑based management model, minimizing disruption to end users.
- Train, guide, and support cross‑functional teams while streamlining system processes, improving workflow efficiency, and enhancing the overall user experience.
- Maintain a working knowledge of MECM infrastructure to support co-management scenarios, policy coexistence, and workload transitions to Intune.
- Configure and manage MECM and Intune co‑management workloads to ensure a smooth transition toward cloud‑native endpoint management.
- Define and enforce device configuration standards, security baselines, and compliance frameworks across managed endpoints.
- Provide technical guidance and mentorship to associate‑ and mid‑level engineers on Intune, Autopilot, and endpoint management best practices.
- Partner with security, identity, and helpdesk teams to align endpoint management strategies with broader organizational goals.
- Own and maintain comprehensive documentation for Intune and Autopilot processes, migration playbooks, and infrastructure configurations.

Job Specific Duties and Responsibilities:

-

Intune infrastructure ownership — Design, implement, and maintain enterprise Intune infrastructure including configuration profiles, compliance policies, conditional access, and app management at scale.

-

Autopilot program lead — Architect and manage Windows Autopilot deployment strategies across the organization, including profile design, device registration, and integration with Entra ID and Intune.

-Intune migration leadership — Plan and execute migrations from on-premises or hybrid management environments (MECM/GPO) to a modern Intune-based management model, minimizing disruption to end users.

-MECM infrastructure support — Maintain working knowledge of MECM infrastructure to support co-management scenarios, policy coexistence, and workload transitions to Intune.

-Co-management configuration — Configure and manage MECM and Intune co-management workloads, ensuring a smooth transition path as the organization moves toward cloud-native management.

-Policy & security architecture — Define and enforce device configuration standards, security baselines, and compliance frameworks across managed endpoints.

-Team mentorship — Provide technical guidance and mentorship to associate and mid-level engineers on Intune, Autopilot, and endpoint management best practices.

-Stakeholder collaboration — Partner with security, identity, and helpdesk teams to align endpoint management strategies with broader organizational goals.

-Documentation & runbooks — Own and maintain comprehensive documentation for all Intune and Autopilot processes, migration playbooks, and infrastructure configurations.

Minimum Requirements

- Bachelor's degree in relevant field of study and 5+ years of relevant professional experience required, or equivalent combination of education and experience.

Job Specific Requirements:

5+ years of experience in enterprise endpoint management or systems engineering
3+ years of hands-on experience with Microsoft Intune in a production enterprise environment
Proven experience leading or executing an Intune migration from MECM or GPO-based management
Strong working knowledge of Windows Autopilot in an enterprise setting
Familiarity with MECM/SCCM in a co-management or hybrid capacity

Must have the following experience for consideration

Microsoft Intune — Expert Level

Intune tenant configuration and administration
Device configuration profiles (Windows, iOS, Android, macOS)
Compliance policies and conditional access integration
App deployment and management (Win32, MSIX, LOB apps)
PowerShell and Intune scripting / remediation scripts
Role-based access control (RBAC) within Intune
Entra ID (Azure AD) device identity and hybrid join
Endpoint security policies (Defender, BitLocker, Firewall)
Update rings and Windows Update for Business
Intune reporting and monitoring

Windows Autopilot — Expert Level

Autopilot profile design and deployment strategy
All deployment modes (user-driven, self-deploying, pre-provisioning)
Hardware hash registration and OEM/reseller integration
Enrollment Status Page (ESP) configuration and troubleshooting
Autopilot Reset and device reprovisioning
Integration with Entra ID and dynamic device groups

Intune Migration — Core Competency

MECM to Intune workload migration planning and execution
GPO to Intune configuration profile translation
Co-management enablement and workload transition
Hybrid Azure AD join to Entra ID join migration
Stakeholder communication and change management during migrations
Validation and testing frameworks for policy parity

MECM / SCCM — Working Knowledge

Co-management configuration and workload management
Site infrastructure and hierarchy awareness
OSD and task sequence fundamentals
Software deployment and patch management
Client health and troubleshooting

Supporting & General Skills

PowerShell scripting (intermediate to advanced)
Microsoft Graph API (basic to intermediate)
Entra ID / Azure AD administration
Active Directory and Group Policy
Networking fundamentals (DNS, DHCP, VPN, proxy)
Windows 10/11 enterprise architecture
Security baseline frameworks (CIS, DISA STIG awareness)
Strong documentation and technical writing skills
Project and migration planning

Preferred:

Microsoft MD-102 (Endpoint Administrator) certified
Microsoft SC-300 or AZ-104 a plus
Experience with Microsoft 365 and Defender for Endpoint integration
Familiarity with Zero Trust network access principles
Experience working in regulated or compliance-driven environments

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews,—please contact People Operations at applicantaccom@maximus.com.