Overview
We are seeking a Microsoft Intune and Entra ID Engineer to lead the deployment and ongoing management of modern endpoint and identity solutions across multiple client environments. This role blends hands-on engineering with solution design, giving you ownership over client implementations while collaborating with senior architects on more complex initiatives. You will play a key role in delivering secure, scalable, cloud-native (Entra-joined) device environments for both corporate and BYOD use cases.

Key Responsibilities

• Lead deployment and management of Intune and Entra ID solutions across multiple client tenants
• Design and implement Entra-joined and hybrid device environments based on client needs
• Execute and own migrations from on-prem or hybrid AD to Entra ID
• Configure and optimize device compliance policies, configuration profiles, and security baselines
• Implement and manage Conditional Access, MFA, and identity security controls
• Lead Windows Autopilot deployments and modern device lifecycle strategies
• Design and support BYOD solutions using MAM and app protection policies
• Integrate and manage Microsoft Defender for Endpoint and related security tools
• Troubleshoot and resolve complex device, identity, and access issues (Tier 3)
• Contribute to standardization, templates, and best practices across client environments
• Automate routine tasks using PowerShell and/or Graph API
• Act as a technical point of contact for clients on endpoint and identity topics
• Mentor junior engineers and assist with escalations
• Maintain clear documentation and contribute to internal knowledge base

Required Qualifications

• 3–6 years of experience with Microsoft Intune and Entra ID (Azure AD)
• Proven experience deploying and managing Intune in production environments
• Strong understanding of Conditional Access, MFA, and Zero Trust principles
• Hands-on experience with Windows Autopilot and modern endpoint provisioning
• Experience supporting BYOD/MAM strategies
• Solid PowerShell skills for administration and automation
• Strong troubleshooting skills across identity, device compliance, and access issues
• Ability to manage multiple client environments and projects simultaneously

Preferred Qualifications

• Experience in an MSP or multi-tenant environment
• Microsoft certifications (MD-102, MS-102, SC-300, or similar)
• Experience with Microsoft Defender suite and M365 security tools
• Familiarity with Graph API and automation frameworks
• Exposure to compliance frameworks (HIPAA, SOC 2, CIS benchmarks)

Key Competencies

• Ability to take ownership of projects and drive them to completion
• Strong client-facing communication and consulting skills
• Balance of engineering execution and solution design thinking
• Organized and able to prioritize in a fast-paced MSP environment
• Security-first mindset with attention to detail

Pay: $80,000.00 - $85,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off

Education:

• Bachelor's (Preferred)

Experience:

• M365 Entra and Intune management: 5 years (Required)

License/Certification:

• MD 102 -Intune & Endpoint Management (Preferred)
• SC-300 - Microsoft Entra Identity (Preferred)

Willingness to travel:

• 25% (Preferred)

Work Location: Hybrid remote in Springville, UT 84663