Principal Modern Endpoint IT Engineer - Microsoft Intune

Job Purpose

• The senior North America (NA) Digital Workplace Client Engineer is responsible for engineering, implementing, and managing the full spectrum of North America's modern workplace endpoint platforms. Primary technologies include Microsoft Intune as the cloud-native Unified Endpoint Management (UEM) solution, Windows client platforms, iOS/iPadOS mobile devices via Apple Business Manager (ABM), and next-generation virtual endpoint solutions including Windows 365 Cloud PC and Azure Virtual Desktop (AVD). The role also encompasses Microsoft Entra ID Join and Hybrid Entra ID Join strategies for identity-based endpoint access.
• The senior Client Engineer serves as the North America subject matter expert (SME) and Level 4 escalation authority for client endpoint technologies, defining technical standards, multi-year roadmaps, and architecture that position NA as the global model for modern endpoint engineering. This role partners closely with Microsoft and other key vendors, participates in product roadmap planning, and drives the transition from legacy on-premises management (SCCM, Group Policy) to a fully cloud-native endpoint model.
• This is a senior individual contributor role reporting to the Team Manager, NA Digital Workplace Client Engineering Services. The North America environment serves as the reference architecture and foundation for global endpoint standards adoption across the Honda enterprise.

Key Accountabilities

• Engineer, implement, and support Microsoft Intune as the primary Unified Endpoint Management (UEM) platform for Windows, iOS/iPadOS, MacOS and virtual endpoints. Manage device enrollment, configuration, compliance, application deployment, Windows Autopilot, and Apple Business Manager integration.
• Define endpoint architecture, standards, and multi-year technology roadmaps for Intune, Microsoft Entra ID Join, Hybrid Entra ID Join, Windows 365 Cloud PC, Azure Virtual Desktop (AVD), and mobile device management solutions.
• Serve as the highest-level technical escalation point for complex endpoint issues, leading root cause analysis, problem management, and long-term remediation while providing technical guidance to support teams.
• Lead the transition from SCCM and Group Policy-based management to cloud-native endpoint management through Intune, including migration planning, deployment strategy, and adoption of zero-touch provisioning technologies.
• Partner with Microsoft, Apple, and other technology providers to evaluate emerging solutions, conduct proof-of-concept initiatives, influence product direction, and recommend technology investments.
• Collaborate with security, identity, infrastructure, and business teams to ensure endpoint services align with compliance, governance, security, and digital workplace objectives.
• Develop and maintain engineering standards, operational procedures, runbooks, and technical documentation.

Qualifications, Experience, and Skills

Minimum education:

• A Bachelor's degree in Computer Science / Information Technology (IT) / Networking / Electronics or a related STEM field of study, or equivalent relevant professional experience in the industry along with industry standard certifications.

Required Qualifications:
• At least 8 or more years of enterprise endpoint engineering, modern desktop administration, or endpoint management experience.
• 5+ years of hands-on Microsoft Intune administration and engineering experience supporting Windows and mobile platforms.
• 3+ years of experience with Microsoft Entra ID (Azure AD), including Entra ID Join and Hybrid Entra ID Join implementations.
• 2+ years of enterprise iOS/iPadOS device management experience using Intune and Apple Business Manager.

Other required technical skills:
• Strong expertise in Microsoft Intune, Windows management, Windows Autopilot, compliance policies, application packaging and deployment, and endpoint lifecycle management.
• Experience migrating SCCM and Group Policy-managed environments to cloud-native Intune management.
• Knowledge of Apple Business Manager, Mobile Device Management (MDM), Mobile Application Management (MAM), and enterprise iOS deployment practices.
• Experience with Conditional Access, Microsoft Defender for Endpoint, BitLocker, endpoint security baselines, compliance reporting, and governance requirements.
• Proficiency in PowerShell automation, Microsoft Graph, reporting, troubleshooting, and root cause analysis.
• Experience with ServiceNow or similar ITSM platforms, technical documentation, vendor engagement, roadmap planning, and stakeholder communication.

Highly desirables:
• Experience with Windows 365 Cloud PC, Azure Virtual Desktop (AVD), Power BI, Azure Monitor, and Microsoft endpoint management certifications.

Workstyle

• This is an onsite job. One remote workday per week may be possible with prior departmental approval.

Job location options

• Candidate can report onsite at either one of these AHM office locations:

• • Marysville, OH
  • Torrance, CA

Visa sponsorship issues:

• This role is not eligible for work visa sponsorship.

Relocation assistance

• Position not eligible for relocation assistance.