Lead Mobility Engineering SME (Microsoft Intune)

Location: New York, NY; primarily in the office

Salary: $150,000–$190,000 base salary per year, plus eligibility for a bonus.

Company

hirify.global provides commercial and personal insurance solutions through a global property and casualty insurance network.

What you will do

• Own the architecture, engineering, security, automation, and operational health of the enterprise mobile and modern endpoint ecosystem.
• Design and operate Microsoft Intune, Apple Business Manager, iOS/iPadOS, Android Enterprise, Microsoft 365 mobile services, and Windows Autopilot.
• Engineer modern authentication, Conditional Access, certificate infrastructure, passwordless access, and secure device enrollment.
• Design and troubleshoot mobility networking, including 802.1X, EAP-TLS, VPN, DNS, proxy, TLS inspection, APNs, and FCM connectivity.
• Automate policy deployment, lifecycle operations, reporting, drift detection, monitoring, and ITSM integrations with PowerShell, Microsoft Graph, REST, JSON, Azure Automation, and Functions.
• Lead production changes, Tier 3/4 troubleshooting, root-cause analysis, vendor escalations, technical documentation, mentoring, and roadmap planning.

Requirements

• 7+ years of endpoint, mobility, or digital workplace engineering experience in a large or complex environment.
• Deep hands-on Microsoft Intune experience covering enrollment, compliance, configuration profiles, application deployment, app protection, reporting, and troubleshooting.
• Strong MDM and MAM architecture knowledge across corporate-owned and BYOD scenarios, including iOS/iPadOS and Android Enterprise.
• Experience with Windows Autopilot, Enrollment Status Page troubleshooting, update rings, Entra ID, Conditional Access, and certificate-based secure access.
• Practical expertise in mobility networking, including 802.1X, certificate-based Wi-Fi, VPN, DNS, proxy, and TLS inspection.
• Demonstrated automation with PowerShell, Graph, REST APIs, and JSON, together with structured log, telemetry, and root-cause troubleshooting.

Nice to have

• Experience with Workspace ONE UEM, Ivanti/MobileIron, Jamf, SOTI, or BlackBerry UEM, including migration or coexistence projects.
• Large-scale UEM migration into Intune, Apple Declarative Device Management, Android dedicated or kiosk fleets, mobile threat defense, or zero-touch provisioning.
• Telecom, carrier, eSIM, mobile passwordless authentication, or legacy VPN retirement experience.
• Experience in a global, highly regulated, or large-enterprise environment.
• Certifications such as MD-102, SC-300, SC-200, SC-100, Apple Certified IT Professional, Android Enterprise Professional, or CCNA.

Culture & Benefits

• Primarily office-based collaboration in New York.
• Comprehensive benefits supporting health, wellbeing, financial security, and professional development.
• Continuous learning and development opportunities.
• Inclusive culture supported by employee resource groups and global chapters.
• Reasonable accommodations are available for applicants and employees with disabilities.