InTune Architect - Remote

MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2. InTune Architect Program: Transportation Security Administration (TSA) Technology for Applications, Logistics, Operations, and Network (TALON) Start Date: 9/15/2026 - 5 year POP Pay: $100,000 - $115,000 - benefits available Location: Fully Remote Position Overview MKS2 is seeking an experienced Intune Architect to support the TALON Program under Accenture Federal Services (AFS) . This role will lead the design and implementation of a large-scale Microsoft Intune architecture, supporting Windows, iOS/iPadOS, and Android environments. The architect will drive modern endpoint management, security compliance, and Blackberry UEM to Intune migration efforts while partnering with Security, Identity, Networking, and Engineering teams to deliver a Zero Trust-aligned endpoint platform. Key Responsibilities Design and implement enterprise Microsoft Intune architecture and governance. Lead Blackberry UEM to Intune migration strategy and SCCM/Configuration Manager co-management initiatives. Develop device compliance policies, configuration profiles, application deployment standards, and update management strategies. Design Conditional Access, security baselines, BitLocker governance, and Defender for Endpoint integrations. Architect Entra ID device identity, authentication, and access management solutions. Develop PowerShell automation, reporting, and configuration-as-code practices. Lead pilot deployments, migration waves, executive briefings, and stakeholder communications. Create technical standards, architecture documentation, and operational procedures. Required Qualifications Minimum 8 years of experience in endpoint management, systems engineering, or related field. 3+ years architecting Microsoft Intune solutions in enterprise environments. Expert knowledge of: Microsoft Intune Autopilot Device Compliance & Configuration Profiles Application Lifecycle Management (Win32, MSIX, MAM) RBAC and Scope Management Experience with: Conditional Access Microsoft Defender for Endpoint Entra ID (Azure AD) SCCM/Configuration Manager Co-Management PowerShell Automation MDM/MAM Administration Strong experience leading large-scale enterprise endpoint modernization projects. Preferred Qualifications Experience supporting federal agencies or Public Trust environments. Knowledge of Zero Trust architecture and NIST 800-53 controls. Experience with FedRAMP and ATO processes. Advanced expertise with: Defender for Endpoint KQL and Log Analytics Attack Surface Reduction (ASR) Certificate Management (SCEP/PKCS) Wi-Fi and VPN Architecture Experience with Terraform, Bicep, Git-based governance, and Infrastructure as Code. Strong incident response, disaster recovery, and change management experience. Clearance: Must be eligible to obtain and maintain a Public Trust clearance or higher. Diversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.