System Administrator – Microsoft Intune

About the role

We are looking for a System Administrator specialized in Microsoft Intune to join a leading technology and telecommunications company in Portugal. Based in Lisbon with a hybrid work model, you will help secure and scale the enterprise device infrastructure.

Key responsibilities

• Administer and optimise the Microsoft Intune tenant, including configuration profiles, compliance policies, conditional access and update rings.
• Design and maintain device enrollment flows for Windows Autopilot, macOS, iOS and Android Enterprise.
• Package, deploy and lifecycle‑manage applications via Intune (Win32, MSI and mobile apps).
• Build and maintain Windows Autopilot deployment profiles for hybrid and Entra‑joined scenarios.
• Manage endpoint security baselines, BitLocker, Defender for Endpoint and attack‑surface‑reduction policies.
• Develop PowerShell scripts and Microsoft Graph automations for device configuration and reporting.
• Act as 3rd‑line escalation for endpoint incidents and lead the patch‑management strategy.

Required profile

• 3+ years of hands‑on experience administering Microsoft Intune in production.
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access and modern authentication.
• Proven experience with Windows Autopilot, including hybrid join scenarios.
• Solid PowerShell scripting skills and familiarity with the Microsoft Graph PowerShell SDK.
• Fluent English with excellent written and spoken communication.
• Legal right to work in Europe.

Required skills

• Microsoft Intune
• Microsoft Entra ID (Azure AD)
• Conditional Access
• Windows Autopilot
• PowerShell
• Microsoft Graph PowerShell SDK
• Win32, MSI and mobile app packaging
• BitLocker
• Defender for Endpoint
• Endpoint security baselines
• Windows 10/11 internals
• MDM policy mapping and CSP configuration
• Power BI (optional)
• Log Analytics (optional)
• Microsoft Purview (optional)