Avanade Technology/Software

SOE Engineer (Intune & Security Policies)

Perth, Australia +5 In person Full-time

Location: Melbourne, 161 Collins Street, Level 5

Role Description

The SOE Engineer is responsible for the design, build, configuration, and validation of the Windows 11 Standard Operating Environment (SOE) within the client environment. The role focuses on Microsoft Intune, Windows Autopilot, security baselines, compliance policies, device configuration, application deployment, and endpoint security controls to ensure devices meet client operational and security requirements.

Working closely with architects, security specialists, and deployment teams, the SOE Engineer develops and implements device management and policy configurations, supports endpoint onboarding processes, and ensures consistent deployment and operation of the SOE across the EUC fleet.

You must be an Australian citizen to apply; security clearance is highly regarded.

Key Responsibilities

  • Design, build, and maintain the Windows 11 SOE.
  • Configure Microsoft Intune device management policies and profiles.
  • Implement Windows Autopilot provisioning and enrolment processes.
  • Deploy and manage security baselines, compliance policies, and endpoint protection controls.
  • Configure conditional access dependencies and device compliance integrations.
  • Package, deploy, and manage applications through Microsoft Intune.
  • Support device provisioning, rebuild, and onboarding processes.
  • Validate endpoint compliance with client security and operational requirements.
  • Develop SOE documentation, build procedures, and operational guidance.
  • Support testing, pilot deployments, and transition to operations activities.

Key Skills

Microsoft Intune

Windows 11 Administration

Windows Autopilot

Endpoint Security Management

Microsoft Entra ID

Device Compliance Policies

Configuration Profiles

Security Baselines

Microsoft Defender for Endpoint

Application Packaging and Deployment

Win32 Application Management

Endpoint Analytics

Conditional Access Integration

Device Provisioning and Lifecycle Management

Endpoint Troubleshooting and Support

PowerShell Automation

.

Preferred Experience

  • Microsoft Intune and Endpoint Management implementations.
  • Windows 11 SOE design and deployment.
  • Windows Autopilot provisioning and large-scale endpoint rollouts.
  • Microsoft Defender for Endpoint and endpoint security controls.
  • Government or highly regulated environments.
  • Enterprise endpoint management and security transformation programs.
  • Migration from traditional endpoint management platforms to Microsoft Intune.
  • .
  • Additional Locations: Brisbane, 10 Eagle Street, Canberra, 65 Canberra Avenue Bldg, Sydney, International House, 3 Sussex St, Adelaide, 30 Pirie Street, Perth, Exchange Tower

Job description provided by Avanade.
View the original posting