Endpoint Administrator (Intune, Defender)

We are looking for an intermediate level profile for daily operational support and administration for Microsoft cloud services such as SharePoint, OneDrive, Intune, Defender, The roles involve handling incoming tickets, creating documentation on the existing infrastructure, and supporting the Platform Manager creating governance policies, monitor and change management of new features released by Microsoft. The contractors will also collaborate with administrators of other Microsoft 365 services to ensure smooth platform operations Daily Operations and Ticket Management for SharePoint, Intune, Defender, Purview, OneDrive, Copilot • Efficiently manage and resolve daily support tickets related to the Microsoft services, ensuring timely and effective issue resolution. • Monitor platform performance and escalate issues when necessary, with Microsoft. • Workload report and ongoing tasks within the team meetings (weekly) • Use of PowerShell to update system configurations when applicable. Documentation • Create and maintain documentation of the current infrastructure. • Ensure documentation is up-to-date and accessible to relevant stakeholders. • Update documentation based on the new features released by Microsoft, including material for change management. 3. Platform Support • Provide ongoing technical and operational support to the Platform Managers. • Assist in platform migrations and configuration changes. Administration of Microsoft 365 platforms • Administer SharePoint, OneDrive, Intune, Defender, Purview and Copilot (more detailed in section 2). • Coordinate with administrators of other Microsoft 365 services (e.g., Teams, OneDrive, Exchange) to ensure integrated platform support. • Participate in cross-functional meetings and contribute to platform-wide initiatives. • Handle tickets of other Microsoft services that are introduced under the responsibility of Digital Workplace service (e.g. Microsoft Bookings, Viva Insight, Purview or other Microsoft 365 applications) Continuous Improvement • Identify opportunities for automation and process optimisation. • Propose improvements to enhance user experience and platform efficiency. Microsoft 365 administration activities SPECIFIC EXPERTISE: Endpoint Management – Microsoft Intune Ability to design, deploy and troubleshoot modern endpoint management such as: o Design and implement device enrollment strategies (Autopilot, BYOD, corporateowned) o Create and maintain compliance policies (e.g., encryption, OS version, secure boot) o Configure and deploy configuration profiles (Wi-Fi, VPN, certificates, security baselines) o Package and deploy applications (Win32, Microsoft Store, LOB apps) o Implement and manage Windows Update rings and feature update policies o Troubleshoot device compliance, enrollment failures, and policy conflicts o Implement Conditional Access integration with Intune compliance o Support mobile device management (iOS/Android) including app protection policies Security Operations – Microsoft Defender Suite Hands-on experience with endpoint security, threat detection, and response. o Configure and manage Microsoft Defender for Endpoint policies o Investigate and respond to security incidents and alerts o Perform threat hunting using advanced hunting queries (KQL) o Tune detection rules to reduce false positives o Implement and manage attack surface reduction (ASR) rules o Configure device control policies (USB, removable media) o Integrate Defender with Intune and Conditional Access o Produce security reports and recommend improvements o Support vulnerability management and remediation tracking Virtual Desktop – Azure VDI Ability to deploy and operate scalable virtual desktop environments. o Design and deploy Azure Virtual Desktop (AVD) environments o Configure host pools, application groups, and workspaces o Optimize session host performance (FSLogix profiles, scaling) o Implement image management strategy (golden image, updates) o Configure identity integration with Azure AD / Entra ID o Monitor and troubleshoot user sessions and performance issues o Implement cost optimization strategies (auto-scaling, VM sizing) o Secure AVD environment using Defender and Conditional Access o Support end-user connectivity issues and access troubleshooting Identity & Access (Supporting Scope) Strong understanding of identity as the control plane. o Configure and manage Conditional Access policies o Implement MFA and passwordless authentication o Manage role-based access control (RBAC) o Support B2B / guest access scenarios o Integrate applications with Azure AD / Entra ID SSO o Monitor and respond to risky sign-ins and identity alerts Cross-Platform & Operational Tasks o Document solutions and maintain operational runbooks o Automate tasks using PowerShell / Graph API o Participate in service acceptance and transition to operations o Work with stakeholders to translate business requirements into technical solutions o Ensure compliance with security and governance standards o Provide knowledge transfer to internal teams BEST PRACTICES • Adhere to IT Service Management (ITSM) best practices, ensuring consistent, efficient, and customer-focused service delivery. • Comply with the organisation’s security policies and data protection regulations, including the General Data Protection Regulation (GDPR). • Safeguard sensitive information through appropriate handling and confidentiality measures. • Apply appropriate access controls to ensure that only authorized personnel can access relevant systems and data. • Maintain audit trails for all administrative actions to support accountability and traceability. Level : Intermediate Delivery mode : Remote (from EU Countries) Only EU Citizens