Senior Desktop Engineer - Hybrid - Blue Bell, Pennsylvania

Job Description

At Slipstream we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach Our solutions are designed exclusively for emerging pharma and biotech organizations Slipstreams industry leading solutions free clients from the demands of internal IT and allow them to rapidly advance their mission Led by a leadership team that has been together for over 10 years you will join a proven team culture and strategy to drive innovation within the IT outsourcing industry while developing your skillset with the opportunities for internal growth Responsibilities Design configure and continuously refine the Microsoft Intune environment to meet organizational security compliance and productivity requirementsOwn Intune tenant settings conditional access policies and compliance baselines across Windows macOS iOS and Android endpointsReview and optimize existing configurations on an ongoing basis identifying gaps redundancies and drift from defined standardsMaintain and document configuration profiles endpoint security policies and compliance posture in alignment with CIS benchmarks or internal security frameworksDeploy and manage applications across the estate via Intune including Win32 MSIX Line of Business and Microsoft Store app typesDefine and enforce app protection policies APPMAM for both managed and unmanaged devices ensuring data loss prevention controls are consistently appliedConfigure and manage app configuration policies for managed apps including Microsoft 365 and third party applicationsOwn the end to end application patching process packaging testing staged rollout and validation ensuring timely remediation of vulnerabilitiesMonitor deployment success rates and proactively resolve failed assignments or conflicting policiesDesign and maintain Azure AD dynamic groups to support accurate automated policy and application targeting across users and devicesDevelop and refine dynamic membership rules using device and user attributes OS version department location compliance state to reduce manual overheadAudit group membership and assignment logic regularly eliminating over broad targeting or conflicting inclusions and exclusionsCollaborate with IAM and security teams to align group structures with role based access control RBAC and zero trust principlesWrite test and deploy PowerShell scripts via Intune for device configuration remediation and reporting tasks that fall outside native policy capabilitiesBuild and maintain Proactive Remediations to detect and self heal common endpoint issues at scaleLeverage Microsoft Graph API and PowerShell modules MicrosoftGraph Az to automate administrative tasks reporting and bulk operations within the Intune and Entra ID environmentMaintain a version controlled script library Git ensuring scripts are documented peer reviewed and tested in a non production environment before deploymentEvaluate and implement automation opportunities to reduce manual toil across endpoint lifecycle processes provisioning patching decommissionMaintain endpoint compliance policies and act as the subject matter expert for Intune based security controls within the wider security teamIntegrate Intune with Microsoft Defender for Endpoint ensuring MDE onboarding sensor health and policy enforcement are maintained across all managed devicesSupport audit and compliance activities by producing accurate device compliance reports and responding to findings in a timely mannerAct as the escalation point for complex Intune endpoint and application delivery issues driving root cause analysis and resolutionMentor junior engineers conducting script and configuration reviews and sharing knowledge of modern management best practicesContribute to and maintain internal runbooks SOPs and technical documentation for all areas of the Intune environmentStay current with Microsoft Intune Entra ID and Windows feature releases proactively assessing impact and communicating changes to the teamLead or contribute to endpoint modernization projects including Autopilot deployments co management transitions and Windows feature update ringsWork Location \& Schedule Employees are expected to maintain a consistent hybrid schedule of three 3 onsite workdays per week at our Blue Bell PA office and two 2 remote workdays each weekBenefits 401k matchComprehensive group health dental vision benefitsLife insuranceLTDDiscretionary PTOSlipstream is an equal opportunity employer that is committed to diversity and inclusion in the workplace We prohibit discrimination and harassment of any kind based on race color sex religion sexual orientation or identity national origin genetic information pregnancy or any other protected characteristic as outlined by federal state or local laws Slipstream makes hiring decisions based solely on qualifications merit and business needs at the time This job description may not be inclusive of all assigned duties responsibilities or aspects of the job described and may be amended at any time at the sole discretion of the Employer