What success looks like in this role:
Work Modality: Home Office -Mexico Home-Based. However, if the candidate is based in a city with a client site, occasional hybrid attendance may be required.
Summary of Role:
We are looking for a Senior MDM Engineer to own the design, deployment, and day-to-day management of our enterprise endpoint ecosystem across Windows, MacOS, iOS, and Android. This role sits at the center of our Microsoft 365 and Intune environment, with hands-on responsibility for imaging, packaging, software distribution, mobile application and device management (MAM/MDM), and endpoint security. The ideal candidate combines deep technical expertise in the Microsoft stack with practical experience supporting Apple and Android device management and is comfortable working with bilingual (Spanish/English) teams and stakeholders.
Main Responsibilities:
- Design, configure, and administer Microsoft Intune for device enrollment, compliance policies, configuration profiles, and app deployment across Windows, MacOS, iOS, and Android.
- Manage hybrid Active Directory / Azure AD environments, including group policies, conditional access, and identity-related endpoint configurations.
- Maintain and evolve legacy SCCM infrastructure where still in use, and support migration paths from SCCM to cloud-native (Intune) management.
- Build and maintain OS images using both traditional imaging methods and Windows Autopilot for zero-touch provisioning.
- Package, test, and deploy software across the device fleet, ensuring reliable distribution and version control.
- Develop and maintain scripts (PowerShell, shell, or similar) to automate provisioning, configuration, remediation, and reporting tasks.
- Administer Apple Business Manager for iOS/MacOS device enrollment, app licensing (VPP), and supervised device configuration.
- Manage Android devices via Android Enterprise and Samsung Knox for corporate-owned and BYOD scenarios.
- Implement and maintain endpoint security controls using Microsoft Defender (for Endpoint and related workloads) and support data protection initiatives via Microsoft Purview.
- Support and administer the broader Microsoft 365 environment as it relates to endpoint and identity management.
- Troubleshoot and resolve complex device, application, and connectivity issues escalated from Tier 1/2 support.
- Document processes, standards, and configurations, and provide guidance to junior engineers and support staff.
- Collaborate with security, infrastructure, and help desk teams to align endpoint policies with organizational compliance and security requirements.
- Plan and lead endpoint management projects end to end — scoping, timelines, resourcing, and risk tracking — for initiatives such as OS migrations, MDM roll-outs, and tooling changes.
- Coordinate with cross-functional stakeholders and vendors to keep project milestones on track, and report progress and risks to leadership.
- Conduct training sessions and workshops for clients and internal teams on Endpoint best practices.
You will be successful in this role if you have:
Job Qualifications
Must Have Skills
- Qualifications:
- 5+ years of experience in endpoint/systems engineering, with a strong focus on device management.
- Hands-on expertise with Microsoft Intune (MDM/MAM policies, compliance, app deployment).
- Solid working knowledge of Azure AD and on-premises Active Directory.
- Experience with SCCM (ConfigMgr) administration and troubleshooting.
- Working knowledge of Microsoft 365 administration as it intersects with endpoint management.
- Practical experience with Microsoft Defender for Endpoint and Endpoint Security controls.
- Familiarity with Microsoft Purview for data protection/compliance.
- Experience with traditional OS imaging and Windows Autopilot deployment.
- Software packaging and distribution experience (e.g., Win32 apps, MSI/scripted installs).
- Scripting proficiency, particularly PowerShell, for automation and remediation.
- Experience administering Apple Business Manager and managing MacOS/iOS devices.
- Experience with Samsung Knox and Android Enterprise device management.
- Demonstrated ability to support a multi-platform environment (Windows, MacOS, iOS, Android).
- Fluent in Spanish and English (spoken and written).
- Project management and execution skills: planning, prioritizing, and driving multi-stakeholder technical projects to completion.
- Skills:
- Proficiency in SCCM and Intune management and operation.
- Patch and software distribution knowledge.
- Strong knowledge of modern management devices.
- Creation and maintenance of builds (computer images).
- Experience in scripting for automation.
- Excellent problem-solving and communication skills.
- Ability to work independently and as part of a team.
- Customer Service: Strong customer service orientation and experience in a customer-facing role.
- Project Management: Basic understanding of project management principles and tools.
Nice to Have
- Portuguese language proficiency.
- Relevant certifications (e.g., Microsoft Certified: Endpoint Administrator Associate, Modern Desktop Administrator, or equivalent).
- Experience with Jamf or other Apple-focused MDM tools.
- Exposure to Zero Trust security frameworks and conditional access design.
- Experience in regulated or multinational enterprise environments.
- Familiarity with ITSM tools (e.g., ServiceNow) for change and incident management.
- Excellent problem-solving and communication skills.
- Ability to work independently and as part of a team.
- Strong customer service orientation and experience in a customer-facing role.
- Project Management: Basic understanding of project management principles and tools
#LI-DT1
Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.
This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at GlobalRecruiting@unisys.com or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys’ EEO commitment here.
