Senior IT Modern Workplace Specialist

About the role

We are looking for a Senior IT Modern Workplace Specialist to lead the design, implementation, and ongoing management of Windows client devices across the enterprise. You will work closely with security and infrastructure teams to ensure a secure, compliant, and efficient modern workplace environment.

Key responsibilities

• Design, implement, and maintain device configuration profiles, compliance policies, and reference OS builds in Microsoft Intune.
• Own Windows deployment scenarios, including Autopilot, Enrollment Status Page, and OS image standardisation.
• Manage Privileged Access Management for endpoints, including Windows LAPS and Entra ID PIM.
• Drive migration of on‑prem Group Policy Objects to cloud‑native Intune CSPs.
• Collaborate with the security team on Conditional Access, MFA, and device compliance integration.
• Act as Tier‑3 escalation point for complex client management incidents.
• Create and maintain documentation, runbooks, and best‑practice guidelines.

Required profile

• Minimum 5 years of professional experience in enterprise Windows client management.
• Deep, hands‑on expertise with Microsoft Intune / Endpoint Manager.
• Strong knowledge of Windows 10/11 architecture, Autopilot, and modern provisioning.
• Proven experience with Privileged Access Management solutions for endpoints.
• Solid understanding of Microsoft Entra ID, Conditional Access, and device identity.
• Experience with PowerShell scripting for automation and reporting.
• Excellent documentation and communication skills in English (German a plus).

Required skills

• Microsoft Intune
• Microsoft Endpoint Manager
• Windows 10 & Windows 11
• Windows Autopilot
• Enrollment Status Page
• Windows LAPS
• Microsoft Entra ID (Azure AD)
• Conditional Access
• PowerShell scripting
• Microsoft Defender for Endpoint
• ASR rules
• Group Policy Objects (GPO)
• Microsoft Configuration Manager (ConfigMgr) – optional