Intune Engineer

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement.

Headquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further.

We are seeking a highly motivated Microsoft Intune focused engineer to join our IT Operations and Vulnerability Management team. This role will be responsible for managing enterprise endpoint solutions, enhancing endpoint security, supporting vulnerability remediation efforts, and automating device management processes across the organization. The ideal candidate has strong experience with Microsoft Intune, Microsoft Entra ID, Windows Autopilot, PowerShell automation, endpoint security, and patch management. Experience with Jamf Pro and Ivanti Endpoint Manager is highly desirable.

• Administer and maintain Microsoft Intune.
• Configure compliance policies, configuration profiles, and security baselines.
• Manage Windows Autopilot deployments.
• Support Windows, macOS, iOS, and Android devices.
• Maintain enterprise endpoint standards and configurations.

Application Management

• Package, test, and deploy enterprise applications.
• Manage software distribution and updates.
• Support deployment of Microsoft and third-party applications.

Security & Vulnerability Management

• Support vulnerability remediation initiatives.
• Implement security hardening standards and endpoint security controls.
• Monitor compliance and investigate endpoint security issues.
• Partner with cybersecurity and infrastructure teams on risk reduction efforts.

Patch Management

• Manage operating system and third-party application patching.
• Monitor patch compliance and remediation reporting.
• Assist with vulnerability reduction efforts across endpoint platforms.

Automation & Engineering

• Develop PowerShell automation solutions.
• Automate endpoint deployment, remediation, and reporting tasks.
• Integrate endpoint management technologies with enterprise systems.

Operational Support

• Provide Tier 3 support for endpoint-related issues.
• Troubleshoot policy, configuration, and application deployment problems.
• Participate in operational, infrastructure, and security projects.
• Create and maintain technical documentation.

• 5+ years of Microsoft Intune administration experience.
• 5+ years of endpoint management experience.
• 3+ years of Microsoft Entra ID (Azure AD) administration.
• 3+ years of Windows Autopilot deployment experience.
• Experience supporting Windows 11 and macOS devices.
• Experience with patch management and endpoint security.
• Strong PowerShell scripting skills.

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• CompTIA Security+ (or equivalent)

• Strong analytical and troubleshooting skills
• Excellent communication and documentation abilities
• Ability to work independently and collaboratively
• Strong focus on security, compliance, and automation
• Ability to manage multiple priorities in a fast-paced environment

• Experience with Jamf Pro administration.
• Experience with Ivanti Endpoint Manager.
• Experience with vulnerability management tools such as Qualys, Rapid7, or Nessus.
• Experience in financial services or other regulated industries.
• Experience supporting Azure Virtual Desktop (AVD) or VDI environments.