Senior IT Modern Workplace Specialist

Qualifications Minimum 5 years of professional experience in enterprise Windows client management Deep, hands-on expertise with Microsoft Intune / Microsoft Endpoint Manager (policy creation, troubleshooting, reporting, Co-Management with ConfigMgr is a plus) Strong knowledge of Windows 10/11 client architecture, Autopilot, Enrollment Status Page, and modern provisioning Proven experience implementing and managing Privileged Access Management solutions for endpoints (Windows LAPS, Entra ID PIM for devices, removal of local admin rights, tiered administration models) Solid understanding of Microsoft Entra ID (formerly Azure AD), Conditional Access, and device identity Experience with PowerShell scripting for automation and reporting in the Intune environment Familiarity with Microsoft Defender for Endpoint, ASR rules, and endpoint security best practices Excellent documentation and communication skills in English (German is a plus) Responsibilities Design, implement, and maintain device configuration profiles, compliance policies, and reference OS builds. Own Windows deployment scenarios Define and enforce endpoint security baselines according to industry standards. Deep dive into Group Policy Objects (GPO) and co-existence/migration scenarios from on-prem AD GPOs to cloud-native Intune CSPs. Manage Privilege Access Management for endpoints Drive standardization of Windows client images, feature updates, and quality update strategies Collaborate with the security team on Conditional Access policies, MFA, and device compliance integration Act as Tier-3 escalation point for complex client management incidents and requests Create and maintain documentation, runbooks, and best-practice guidelines Drive IT workplace projects to completion in collaboration with