SOE/Infrastructure Engineer in Canberra

• Security clearance
• Must have Negative Vetting Level 1
• Job details
• Ensuring requestable software applications and hardware drivers on the Windows 11 devices are maintained at a supported version and patched using the Microsoft Intune endpoint management solution.
• Documentation, configuration of Intune App deployment packaging (Win32 and MSIX) and lifecycle management
• Troubleshooting application authentication and solution development as part of a transition of hybrid joined Windows 11 devices to an Entra joined Windows 11 SOE with Passwordless Experience.
• Prepare written communications and materials such as knowledge base articles and technical instructional documents.
• Review of Windows 11 hybrid and cloud joined device configuration and compliance policies.

This role will support department delivery of projects, initiatives and working alongside a vendor.

• Key duties and responsibilities
• Package, test and deploy applications using Microsoft Intune (Win32 and MSIX).
• Configure and administer Intune device management and endpoint configuration policies.
• Review SCCM/MECM operating system deployment task sequences and enhance Windows Autopilot automation processes.
• Implement and support application control, endpoint security controls and SOE compliance requirements.
• Develop Power Shell scripts to automate deployment, configuration and operational support activities.
• Produce technical documentation, knowledge articles, support procedures and implementation guides.
• Provide Level 3 technical support for SOE, application packaging and endpoint management services.
• Work collaboratively with project, infrastructure, cyber security and service providers to deliver desktop outcomes.
• Support release, change and incident management processes associated application deployments.
• Understanding of technical release and incident management
• Working understanding of Entra ID, Entra Kerberos authentication, Active Directory and Configuration Profiles from hybrid and cloud device perspective, with on-premises accessed resources.
• Endpoint security, compliance and desktop hardening.
• Technical skills
• Strong experience with Intune App deployment packaging (Win32 and MSIX) and lifecycle management
• Microsoft Intune (Endpoint Manager) administration, configuration and compliance policies.
• Intune Autopilot deployment and device provisioning.
• SCCM/MECM operating system deployment and task sequence administration.
• Application control technologies such as Air Lock and WDAC.
• Experience in Power Shell Scripting
• Strong technical writing and change management (raising changes)

Essential criteria Weighting

• Extensive experience in Win32 and MSIX apps packaging, updating and deploying modern cloud-based Windows platforms, specifically Intune Windows 11 devices.
• Experience with developing, configuring, supporting, managing and troubleshooting Intune configuration for hybrid and cloud joined Windows 11 devices.
• Experience configuring and supporting Microsoft endpoint services in cloud and hybrid environments such as Windows Desktop SOE, Intune, SCCM/MECM, Entra, DNS, DHCP and Always-On VPN.
• Skill in preparing written communications and materials such as knowledge base articles and technical instructional documents.
• Demonstrated experience in development of design, architecture, and as-built configuration documentation.

Desirable criteria

• Experience in Intune configuration and management of supervised apple i OS mobile devices, including mobile application deployment.
• Experience transitioning from traditional SCCM-dependent environments to modern management and full Autopilot deployments.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability.

If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.