Endpoint Migration Subject Matter Expert - Quest ODM, Entra ID & Intune

Ampcus Inc. • Troy, MI

2d • Onsite

About The Position

Ampcus Inc. is seeking an Endpoint Migration Subject Matter Expert to provide technical leadership for an enterprise Windows endpoint migration program. The role defines and validates migration approaches involving Quest On Demand Migration (ODM), Active Directory, Microsoft Entra ID, Microsoft Intune, Windows Autopilot, device identity, policy transitions, and endpoint validation. The SME guides engineering teams, troubleshoots complex migration issues, maintains technical standards, and provides evidence-based recommendations on pilot and production readiness.

The position provides authoritative technical guidance, advanced troubleshooting, engineering assurance, and migration-readiness recommendations. It supports engineering consultants and L1/L2 teams while respecting established governance, business approval, change authorization, architecture authority, and technical ownership. The role supplies evidence and recommendations for go/no-go and design decisions and escalates unresolved dependencies and significant risks through approved governance processes.

The role is onsite in Troy, Michigan. Travel to Troy and/or Dublin, Ireland, may be required. Candidates must have a valid passport and any required visa or travel authorization for international travel.

Requirements

• Demonstrated experience designing, implementing, or providing expert technical support for enterprise Windows endpoint migration solutions.
• Deep practical knowledge of Active Directory, Microsoft Entra ID, Microsoft Intune, and Windows device identity.
• Proven ability to diagnose and resolve complex endpoint migration failures across multiple technical domains.
• Experience designing controlled pilots, migration waves, technical acceptance criteria, rollback gates, and hypercare processes.
• Ability to translate technical findings into actionable decisions, remediation plans, runbook updates, and operational guidance.
• Strong communication and collaboration skills, including the ability to work effectively with engineering teams, program leadership, command centers, and stakeholders.
• Ability to provide authoritative technical guidance, engineering assurance, and evidence-based readiness recommendations.
• Knowledge of enterprise Windows endpoint migration architecture, migration-pattern design, pilot and production-wave readiness, rollback planning, and exception management.
• Knowledge of Quest ODM, including ODMAD, Directory Sync, identity and device matching, Device Agent, migration and network profiles, ReACL, migration waves, cutover, and job analysis.
• Knowledge of Microsoft Active Directory, Entra ID, Intune, Hybrid Entra Join, Entra-only devices, and Windows Autopilot.
• Knowledge of Windows 10/11 endpoint engineering, PowerShell, Group Policy Objects (GPO), Intune policies, Windows profiles, device enrollment, compliance, Windows Hello, and BitLocker.
• Knowledge of DNS, PKI and certificates, Network Access Control (NAC), VPN, Conditional Access, endpoint security, and application and network dependencies.
• Advanced troubleshooting across identity, endpoint management, authentication, policy, certificates, network access, and user profiles.
• Valid passport and any required visa or travel authorization for international travel.

Nice To Haves

• Hands-on experience with Quest On Demand Migration (ODM) is strongly preferred.
• Comparable enterprise endpoint migration leadership experience may be considered for candidates demonstrating strong Microsoft endpoint engineering expertise.

Responsibilities

• Serve as the subject matter expert for Hybrid Active Directory/Entra ID and Entra-only endpoint migration patterns.
• Provide hands-on technical guidance for Quest ODM design and configuration, including Directory Sync, identity and device matching, Device Agent, migration profiles, network profiles, ReACL, migration waves, cutover, validation, and rollback.
• Define and maintain technical entry and exit criteria, success measures, hard-stop conditions, exception handling, and rollback requirements for pilot and production migration waves.
• Provide technical direction for Active Directory joins, target OU placement, Entra registration and Hybrid Join, Intune enrollment, Windows Autopilot, Windows profiles, GPO and Intune policy transitions, certificates, and endpoint security.
• Perform advanced root-cause analysis of systemic migration failures and coordinate remediation across endpoint, identity, network, PKI/NAC, security, application, and migration-tool teams.
• Review migration scripts, automation, profiles, configuration changes, and runbook updates before controlled implementation.
• Guide engineering teams and L1/L2 support, establish escalation thresholds, and ensure recurring fixes are incorporated into knowledge articles and standard operating procedures.
• Evaluate live-workstation testing evidence and provide technical readiness recommendations to program leadership and command-center teams.
• Maintain traceable technical evidence, configuration baselines, issue records, decisions, exceptions, and validation results.
• Facilitate technical working sessions and coordinate actions across engineering teams and third-party specialists.
• Support hypercare activities, lessons learned, operational documentation, and continuous improvement of migration processes.
• Provide technical evidence and recommendations for governance decisions, and escalate design decisions, unresolved cross-team dependencies, and significant production risks through established processes.
• Collaborate with program leadership, command-center teams, IAM/Active Directory, Intune/EUC, network, PKI/NAC, security, service desk, application teams, and migration-tool support.
• Coordinate cross-functional remediation and escalate material technical risks through the approved governance model.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed