AVD SME

ZENITH INFOTEK LLC•Berwyn, IL

3d•$50 - $55

About The Position

The AVD SME will provide expert technical support and guidance for endpoint engineering and the End User Computing environment, with a focus on endpoint security protection and application management. The role drives roadmap initiatives to completion on schedule and in accordance with quality standards, and supports operations teams through escalation assistance, root cause analysis, and preventative analysis. The position designs and manages Microsoft Intune policies for application deployment, device compliance, and security configurations, while ensuring integration with other Microsoft 365 services. It also develops Windows 11 provisioning processes using Intune Autopilot, manages Windows Update for Business policies, and maintains standardized Windows 11 deployment images. The role designs and manages Active Directory Group Policy Objects, coordinates with the Active Directory team, implements endpoint security and compliance practices, monitors and responds to endpoint security incidents, and documents configurations and processes. Flexible work-from-home options are available; the posting requests local resources in the listed locations.

Requirements

8+ years of IT infrastructure and endpoint engineering experience, including 5+ years designing and implementing Microsoft Intune solutions.
5+ years of systems engineering experience in a complex enterprise environment.
Enterprise desktop engineering and endpoint support experience.
Proven experience with Windows 11, Active Directory, and Group Policy management.
Experience developing and testing software packages using InstallShield or equivalent packaging technologies.
Expert-level experience in endpoint protection engineering and security controls.
Advanced expertise with Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune.
Expert knowledge of patch management, including BIOS, firmware, operating system, and application updates.
Basic database administration knowledge, particularly Microsoft SQL Server.
Excellent written and verbal communication skills.
Strong analytical, organizational, and problem-solving abilities.
Ability to manage multiple priorities in a fast-paced environment.
Strong collaboration and stakeholder engagement skills.
Demonstrated commitment to continuous learning and professional development.
Ability to work independently while contributing effectively within a team environment.
Bachelor’s degree from an accredited college or university.

Nice To Haves

Experience managing VDI environments, preferably Azure Virtual Desktop (AVD).

Responsibilities

Drive delivery of roadmap initiatives on schedule and in accordance with established quality standards.
Provide advice and direction to support plans and procedures, schedule attainment, product development process adherence, and performance.
Provide last-tier support to operations and support teams, including root cause and preventative analysis.
Act as an expert technical escalation point for the Desktop Operations team and End User Computing environment, with a focus on endpoint security protection and application management.
Create and manage Intune policies for application deployment, device compliance, and security configurations.
Ensure seamless integration with other Microsoft 365 services.
Design and deploy Windows 11 provisioning processes using Intune Autopilot.
Configure and manage Windows Update for Business policies and develop and maintain standardized Windows 11 deployment images.
Design and manage Active Directory Group Policy Objects to enforce security and configuration policies, collaborating with the Active Directory team on infrastructure alignment.
Implement Intune security best practices and compliance policies, and monitor and respond to security incidents related to mobile devices and endpoints.
Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.