Intune Engineer

In this role you will administer and optimize the enterprise Microsoft Intune and SCCM/MECM environments across Windows, macOS and Linux estates. You will partner with infrastructure, cybersecurity and service teams to ensure secure, compliant device management and reliable software deployment. The position supports patching, OS deployment and endpoint lifecycle management in a large, regulated environment. This is a hands-on, cross-functional role that drives secure end-user experiences and platform health. You will work from Leatherhead, contributing to KBR’s mission of delivering technology and engineering solutions to government and industry.

• Administer and optimize Microsoft Intune and SCCM/MECM environments
• Configure device enrolment, compliance policies, security baselines and endpoint management standards
• Package, test and deploy software via Intune, SCCM and other platforms
• Create/manage application packages, including install commands and uninstall processes
• Troubleshoot software installations, enrolment issues and endpoint configuration problems
• Manage WSUS and SCCM software update deployments
• Coordinate OS and application patches across Windows, macOS and Linux
• Support Intune/Entra ID/AD/Azure integrations and identity management
• Configure endpoint policies across Windows, macOS, iOS and Android
• Plan OS upgrades and enterprise update initiatives
• Troubleshoot connectivity, network, DNS, DHCP, firewall and VPN issues
• Develop scripts for packaging, configuration, remediation and automation
• Maintain platform health, compliance and deployment status
• Contribute to incident, problem and change management and document procedures
• Collaborate with cybersecurity, infrastructure, application and service teams to improve endpoint security and user experience

• Right to live and work in the UK
• Baseline Personnel Security Standard screening
• Strong hands-on experience with Microsoft Intune
• Strong hands-on experience with SCCM/MECM
• Experience configuring enrolment, compliance policies, profiles and security settings
• Experience packaging and deploying software via Intune and SCCM
• Experience creating Windows/Win32 packages, commands, dependencies, uninstall processes
• Experience managing WSUS and enterprise patch deployments
• Experience patching across Windows desktops/servers and Linux environments
• Experience supporting endpoint management across macOS, iOS, Android
• Experience administering Apple Business Manager and Automated Device Enrolment
• Strong knowledge of Active Directory and Group Policy
• Strong knowledge of Entra ID and Conditional Access
• Experience supporting Azure services and cloud infrastructure
• Experience troubleshooting endpoint, identity and connectivity issues
• Strong technical documentation and communication skills
• Ability to work with cross-functional teams

• Excellent communication
• Problem solving
• Stakeholder engagement
• Microsoft Intune
• Microsoft Configuration Manager (SCCM/MECM)
• Active Directory