Sr. Unified Endpoint Management Engineer (Microsoft Intune)

Location: Plano, TX, USA; full-time onsite role.

Company

Brown & Brown is an insurance-focused organization built around meritocracy, customer service, and inclusive collaboration.

What you will do

• Engineer, administer, optimize, and govern Microsoft Intune policies, compliance settings, configuration profiles, update rings, endpoint security policies, and device lifecycle processes.
• Design, deploy, and support Windows 365 Cloud PCs and improve Windows Autopilot provisioning, enrollment, performance, and troubleshooting.
• Package, test, deploy, and monitor enterprise applications across primarily Windows endpoints and a smaller macOS footprint.
• Develop PowerShell automation and proactive remediation solutions; monitor platform health, compliance, deployment performance, and service trends.
• Lead root cause analysis for complex endpoint, identity, enrollment, application, and policy issues, serving as a senior escalation point and coordinating with Microsoft and other vendors.
• Maintain technical standards, documentation, operating procedures, diagrams, and knowledge-transfer materials while collaborating with Security, IT Service, Infrastructure, identity, application, networking, and M&A teams.

Requirements

• 7+ years of progressive experience in endpoint engineering, enterprise device management, or related infrastructure engineering, including at least 5 years of hands-on Microsoft Intune administration.
• Advanced hands-on proficiency with Microsoft Intune, Windows Autopilot, Windows 365 Cloud PCs, Microsoft Entra ID, Windows 10/11, and Conditional Access policies.
• Strong experience with device configuration, compliance, endpoint security baselines, application packaging and deployment, patching, and modern provisioning.
• Strong PowerShell scripting skills for administration, automation, reporting, troubleshooting, and proactive remediation.
• Experience diagnosing complex endpoint, identity, enrollment, application, and policy issues in an enterprise environment.
• Working knowledge of endpoint security, vulnerability remediation, encryption, least privilege, Zero Trust principles, and audit or compliance requirements.
• Experience creating technical standards, solution documentation, operational procedures, and knowledge-transfer materials.
• Ability to participate in scheduled production changes and critical-incident support outside normal business hours when required.

Nice to have

• Experience with Microsoft Graph API, Log Analytics, Azure Monitor, or reporting platforms used to automate and monitor endpoint services.
• Experience managing mobile or multi-platform endpoints such as iOS, Android, or macOS.

Culture & Benefits

• Meritocratic culture focused on self-starters and doing what is best for customers.
• Medical/Rx, dental, vision, life, and disability insurance.
• ESPP, 401(k), student loan assistance, and tuition reimbursement.
• Mental health and enhanced advocacy services, paid time off, holidays, and preferred partner discounts.
• Benefit enrollment waiting periods and eligibility criteria may apply, and offerings may vary by subsidiary or geographic location.

Hiring process

• Unsolicited resumes from external recruiters, recruitment vendors, and employment agencies are not accepted without a valid written agreement and prior written authorization.