Tower Lead (Support & Operations)

Job Summary

We are seeking a highly skilled and experienced SCCM/Intune,Windows Imaging & macOS Jamf L3 Lead to oversee, manage, and optimize enterprise-wide Windows and macOS imaging and device management ecosystems. This role involves leading the design, development, deployment, and maintenance of both Windows OS and macOS environments while ensuring security, compliance, and a seamless user experience through SCCM, Intune, and Jamf Pro platforms. The ideal candidate will bring strong technical expertise in imaging, automation, endpoint management, and Jamf Pro administration, along with proven leadership, stakeholder management, and communication skills to guide cross-platform teams and drive operational excellence.

Key Responsibilities

 Imaging (Windows): • Create and manage Windows 10/11 images. • Test and certify new hardware models. • Perform OS deployment using SCCM, Boot Media, and PXE. • Create and maintain OS deployment task sequences and kiosk packages for retail. • Manage Windows 10/11 clients using Intune/Co-Management. • Develop PowerShell scripts for automation and troubleshooting. • Provide L3 support for OSD/imaging issues and assist local IT (FSO) teams. • Prepare, test and deploy driver packages. • Collaborate with customers on new technologies to enhance the end-user Windows experience. Intune Administration (Windows & Cross-Platform): • Implement and configure Microsoft Intune for Windows device and application management. • Configure and administer Windows Autopilot profiles to enable seamless automated device provisioning. • Oversee the enrollment and complete lifecycle management of devices, ensuring proper setup, configuration, and compliance. • Develop, implement, and maintain device compliance policies, configuration profiles, and conditional access controls. • Ensure that all managed devices adhere to established security and compliance standards. • Deploy, monitor, and manage applications through the Intune platform. • Package and distribute applications for both Windows and mobile platforms. • Ensure accurate application configurations and a consistent user experience across all supported devices. • Monitor and enforce security baselines and policies, including encryption, device lockdown, and antivirus management. • Implement and administer identity and access management controls through Intune’s integration with Azure Active Directory (Azure AD). • Provide Tier 2 and Tier 3 support for Intune-related issues, collaborating closely with end users, IT support teams, and vendors. • Troubleshoot and resolve challenges related to device enrollment, configuration, and application deployment. • Investigate and remediate device compliance or security-related incidents. • Generate, review, and analyze compliance reports, audit logs, and device status summaries to ensure alignment with organizational security protocols. • Deliver training and provide technical support to end users and internal IT staff regarding Intune features, configurations, and policies. • Plan, configure, and execute Windows upgrades for business systems, including third-party patch management. SCCM Administration: • Create and manage software packages, applications, and deployment collections within SCCM for efficient software distribution and lifecycle management. • Automate the deployment of software, patches, and updates using task sequences to streamline large-scale rollouts. • Deploy Windows Updates and third-party patches through WSUS integration, ensuring systems remain up to date and secure. • Continuously monitor update compliance, identify issues, and troubleshoot failed deployments to maintain environment health. • Collect and maintain hardware and software inventory from client devices for accurate asset tracking and reporting. • Design and generate custom compliance and audit reports using SQL queries and SSRS for detailed insights into deployment status and adherence. • Ensure client communication and connectivity with SCCM infrastructure is stable and consistent across all endpoints. • Perform client push installations and actively monitor client health, activity, and status through SCCM dashboards. • Define and assign appropriate roles and permissions to SCCM users in alignment with their operational responsibilities. • Integrate SCCM with Intune (Co-Management) and Microsoft Defender for unified device and security management. • Utilize PowerShell scripting to automate repetitive SCCM administrative and operational tasks. • Identify, analyze, and resolve deployment errors, client-side issues, and server-related problems to ensure smooth and uninterrupted service delivery. macOS & Intune Lead:

Skill Requirements

Lead and manage the macOS device management lifecycle using Intune across global enterprise environments. • Design, configure, and maintain Intune cloud infrastructure, ensuring stability and compliance. • Oversee Intune migrations (on-prem to cloud) and macOS OS upgrades (e.g., Monterey → Sonoma). • Develop and deploy policies, configuration profiles, and patch management workflows for macOS. • Automate packaging and deployments using AutoPkg, Composer, and Intune deployment tools. • Integrate Intune with Apple Business Manager, Azure AD for secure enrollment, SSO, and MFA compliance. • Ensure Zero Trust and device compliance alignment with corporate security standards. • Collaborate with cross-functional teams, including Intune Product Directors, Solution Architects, and vendors (Apple, Microsoft, Intune), to maintain operational excellence. • Drive incident resolution and problem management for Intune Pro-related escalations. • Manage change, incident, and request workflows through ServiceNow or JIRA. • Create documentation and SOPs for macOS management, patching, and deployment processes. Required Skills & Qualifications: • Bachelor’s degree in computer science, Information Technology, or related field. 

Other Requirements

 15+ years of experience in enterprise device management (Windows and macOS). • Expertise in MDT, SCCM/MECM, Intune, Jamf Pro, and Windows Autopilot. • Strong scripting and automation skills (PowerShell, Bash, VBScript). • Deep understanding of Windows and macOS internals, drivers, and hardware compatibility. • Hands-on experience integrating with Azure AD, Apple Business Manager and AD. • Proven leadership experience managing cross-functional technical teams. • Excellent communication, stakeholder management, and analytical skills. Preferred Qualifications: • Microsoft certifications (MD-101, AZ-104, MS-500). • Experience managing global enterprise environments. • Familiarity with ITIL processes and service management tools. • Experience driving Zero Trust compliance and endpoint security frameworks.