Workspace Engineer

Global Company is looking for a Mid-Level Workspace Engineer to join their team. SUMMARY:The Workspace Engineer is responsible for designing, implementing, and supporting modern endpoint management solutions across the organization, with a primary focus on Microsoft Intune, Windows Autopilot, and SCCM-to-Intune migration. This role ensures secure, compliant, and efficient device lifecycle management, application deployment, and operational excellence for Windows endpoints. Workspace Engineer collaborates with global IT teams to drive standardization, automation, and continuous improvement in workspace technologies. MINIMUM REQUIREMENTS:Qualification in Information Technology, or related field (or equivalent experience)Certifications such as Microsoft Certified: Modern Desktop Administrator Associate, Azure Administrator Associate, or equivalentFamiliarity with ITIL framework and service delivery processesExperience with cloud migration projects and Office 365 migrationsStrong expertise in Windows 11 OS, Microsoft Intune, SCCM, Azure Active Directory, and Entra IDTroubleshooting experience on end-user devicesMobile application management policiesManagement of Apple devices through IntuneHands-on experience with device enrollment, compliance configuration, and application deployment in IntuneProficiency in scripting languages (PowerShell preferred) for automationExcellent problem-solving and troubleshooting skillsStrong communication skills; ability to work in a global, cross-functional teamExperience with endpoint security solutions and security best practicesMinimum 2–4 years in desktop engineering, endpoint management, or IT support roles RESPONSIBILITES:Device Enrollment and Compliance ConfigurationSet up and test Intune enrollment methods (Windows Autopilot, BYOD, bulk enrollment)Define, implement, and maintain compliance policies (encryption, password rules, antivirus, etc.)Integrate conditional access with Entra ID (Azure AD) for non-compliant devicesEnsure all endpoints meet security baselines and compliance requirementsApplication Management and DeploymentInventory and rationalize SCCM-deployed applications prior to migrationRepackage and publish applications via Intune (Win32, MSI, Store apps)Establish and maintain self-service app deployment through the Company PortalDocument and optimize application deployment processesWindows Update Management via IntuneTransition Windows Update for Business (WUfB) policies from SCCM to IntuneDefine update rings and deadlines for quality and feature updatesMonitor compliance, update success rates, and remediation through Intune reportingConfiguration Profiles and Security BaselinesReplace legacy GPOs and SCCM configuration items with Intune configuration profilesImplement and maintain Microsoft Security Baselines for Windows, Edge, and OfficeRegularly review policy drift and ensure alignment across device groupsMonitoring, Reporting, and Endpoint AnalyticsLeverage Endpoint Analytics and Device Health reports in Intune for proactive maintenanceBuild and maintain dashboards for compliance, patching, and enrollment healthDefine and execute remediation workflows for non-compliant or unhealthy devicesSCCM Co-Management and DecommissioningEnable co-management for pilot devices to ensure smooth policy handoverGradually shift workloads (compliance, updates, apps) from SCCM to IntunePlan and execute SCCM infrastructure decommissioning once all endpoints are fully managed by IntuneCollaboration, Documentation, and SupportPartner with global IT teams to standardize and optimize desktop solutions.Provide training and support to local IT teams and end-users.Create and maintain technical documentation and management reports.