Intune Engineer

Title: Intune Engineer KBR is a global provider of differentiated, professional services and technologies delivered across a wide government, defense and industrial base. Drawing from its rich 100-year history and culture of innovation and mission focus, KBR creates sustainable value by combining engineering, technical and scientific expertise with its full life cycle capabilities to help our clients meet their most pressing challenges today and into the future. We deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 80 countries and operations in over 29 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. At KBR, We Deliver. KBR is looking for a Microsoft Intune Administrator. This is an opportunity to work in a specialist technical role supporting secure, enterprise scale endpoint environments across the United Kingdom. You will be responsible for administering and improving the organisation’s Microsoft Intune platform, Microsoft Configuration Manager (SCCM/MECM) environment, packaging and deploying software, maintaining endpoint configuration and compliance standards, and supporting patch deployment across the Windows, macOS and Linux estate. The role requires strong hands-on experience with Microsoft Intune, Microsoft Configuration Manager (SCCM/MECM), Active Directory, Microsoft Azure and Microsoft Entra ID. You will work closely with infrastructure, cybersecurity, application and service management teams to troubleshoot endpoint, identity, application deployment and connectivity issues across cloud and on premises environments. This is a permanent full-time opportunity based from our Leatherhead offices. The successful candidate must be a UK citizen and must hold, or be able to successfully complete, Baseline Personnel Security Standard screening. Responsibilities Administer, maintain and optimise the organisation’s Microsoft Intune and Microsoft Configuration Manager (SCCM/MECM) environments. Configure and manage device enrolment, configuration profiles, compliance policies, security baselines, application policies and endpoint management standards. Package, test and deploy software for delivery through Microsoft Intune, Microsoft Configuration Manager and other approved enterprise software distribution platforms. Create and maintain application packages, including installation commands, detection methods, dependencies, requirements, supersedence rules and uninstall processes. Troubleshoot failed software installations, application conflicts, device enrolment issues and endpoint configuration problems. Administer and maintain Microsoft Configuration Manager application deployment infrastructure, software distribution processes and operating system deployment capabilities. Manage Windows Server Update Services (WSUS) and Microsoft Configuration Manager software update deployments for Windows desktops and Windows Server environments. Manage Windows update rings, feature updates, quality updates, driver updates and other endpoint patching policies through Windows Update for Business and Microsoft Configuration Manager. Coordinate, test and deploy operating system and application patches across the Windows, macOS and Linux estate using approved endpoint and patch management platforms. Monitor patch compliance, investigate deployment failures and support the remediation of vulnerable or non-compliant devices. Support Microsoft Windows Autopilot device provisioning, enrolment and deployment processes. Administer integrations between Microsoft Intune, Microsoft Entra ID, Active Directory, Microsoft Azure, Microsoft Configuration Manager and related endpoint services. Support identity and device management capabilities, including device registration, group membership, role based access, Conditional Access dependencies and authentication services. Administer and support Apple Business Manager, Automated Device Enrolment and related Apple device lifecycle management capabilities. Configure and manage endpoint policies, application deployments and compliance settings across Windows, macOS, iOS and Android platforms. Plan, coordinate and implement operating system upgrades and enterprise software update initiatives across supported endpoint platforms. Troubleshoot issues involving Microsoft Intune, Microsoft Configuration Manager, Active Directory, Microsoft Entra ID, Windows Server, Microsoft Azure and enterprise applications. Investigate endpoint connectivity issues involving Domain Name System, Dynamic Host Configuration Protocol, routing, firewalls, proxies, virtual private networks and internet access. Analyse Intune logs, Microsoft Configuration Manager logs, Windows event logs, application installation logs and releva