Intune Engineer

Sonic Healthcare USA, Inc., a leader in diagnostic and pathology services, is seeking an Intune Engineer to own and advance our Microsoft Intune environment across clinical and corporate settings. In this patient-focused, quality-driven organization, you will design and manage Intune policies, application deployments, security baselines, and compliance rules to keep endpoints secure, reliable, and compliant with healthcare regulations. You will collaborate closely with security, infrastructure, and clinical teams, providing Tier 3 support, automation, and continuous improvement that directly supports clinicians and patient care nationwide.

Responsibilities

• Design, configure, and manage Microsoft Intune for Windows, mobile, and shared devices across Sonic Healthcare USA.
• Develop and maintain Intune policies, compliance rules, and application deployment workflows to support clinical and corporate users.
• Integrate Intune with Azure AD, security tools, and healthcare systems to protect PHI and meet regulatory requirements.
• Troubleshoot endpoint, enrollment, and configuration issues; provide Tier 3 support to IT and service desk teams.
• Automate endpoint management using Power
• Shell and related tools to streamline onboarding and lifecycle management.
• Monitor endpoint health, security posture, and patch status; produce reports and metrics for IT leadership.
• Collaborate with security, infrastructure, and clinical operations teams to align endpoint standards with patient-care needs.
• Document Intune architectures, standards, runbooks, and best practices for IT staff.
• Support identity, MFA, and conditional access configurations related to Intune-managed devices.
• Participate in on-call rotation and periodic after-hours maintenance or project work.

Required Skills

• Microsoft Intune administration
• Microsoft Endpoint Manager / MEMAzure Active Directory / Entra IDConditional Access and MFAWindows 10/11 configuration and hardening
• Mobile Device Management (i
• OS/Android)
• Power
• Shell scripting and automation
• Endpoint security and compliance policies
• Software and patch deployment
• Group Policy and identity management