Workspace One/SCCM/Intune Lead Engineer – Enterprise Endpoint Management (L3)

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive. Your day at NTT DATA As an Applications Managed Services Engineer (L3) at NTT DATA, you will play a crucial role in providing top-notch managed services to our clients. Your day will involve proactively identifying and resolving incidents related to packaged application technologies like ErP and middleware, ensuring the seamless operation of business-critical applications. You will be the go-to expert for complex technical challenges and will use your deep technical expertise to deliver exceptional client outcomes. You will ensure that all assigned technologies within a client's environment are configured, installed, tested, and fully operational. This includes performing necessary checks, applying monitoring tools, and responding to alerts. When issues arise, you will investigate, analyze, and log these incidents with an eye for detail, escalating to third-party vendors when needed. In this dynamic role, you will also conduct monthly reviews of incidents and service requests, continuously striving to improve the quality of our service. You will provide onsite technical support and field engineering services as necessary, always aiming to optimize work processes and explore opportunities for automation. Your Responsibilities extend to the management and implementation of projects within the technology domain, delivering on client requirements and timelines efficiently. You will also play a part in executing disaster recovery functions and tests, ensuring that our clients' DATA and systems are always protected. Technical Leadership & Architecture • Platform Administration: Deploy, and maintain the Workspace ONE architecture (UEM, Access, Intelligence). • Device Management: Manage the enrollment, provisioning, and ongoing configuration of mobile and desktop (Windows) endpoints • Implement Workspace One/SCCM/ConfigMgr hierarchy including site server topology, DP placement, and boundary configuration for enterprise global environments. • Implementation of enterprise Workspace One/SCCM/ConfigMgr and Microsoft Intune environments for global client accounts. • Architect co-management strategies, Autopilot provisioning frameworks, and Modern Management transition roadmaps. • Define EPM platform standards, governance frameworks, and configuration baselines across multiple global accounts managed from India. • Evaluate emerging Workspace One/Microsoft Endpoint Manager capabilities and provide technical roadmap recommendations to delivery managers and clients. Enterprise Patch Management • Own enterprise-level patch management programs — governing policy, SLAs, exception management, and compliance reporting across 10,000+ endpoint fleets. • Design and manage Intune Expedite policies, WUfB rings, and SCCM ADR-based patching for complex multi-site global environments. • Lead vulnerability remediation programs integrating Qualys/Tenable findings with SCCM/Intune patch deployment cycles. • Develop patching governance documentation, escalation playbooks, and compliance dashboards for client and internal stakeholders. • Lead emergency and zero-day patching response including containment, deployment, and post-incident review from India delivery centre. Advanced OS Deployment & Provisioning • Lead enterprise Windows 11 migration programs including readiness assessment, task sequence design, pilot execution, and phased rollout. • Design and deliver Windows Autopilot + Intune Zero Touch Provisioning frameworks for large-scale global device refresh programs. • Own OSD platform operations — WinPE environments, MDT integration, driver library management, and image currency. • Architect golden image build pipelines, compliance validation, and automated post-deployment configuration. • Define device lifecycle management policies from procurement through decommission for managed global client environments. Automation & Integration • Architect PowerShell-based automation frameworks for SCCM and Intune operational efficiency and compliance reporting. • Lead development of Microsoft Graph API integrations for Intune bulk operations, automated policy enforcement, and reporting. • Design SCCM SQL/Power BI reporting solutions for delivery management and client-level visibility into endpoint health and patch posture. • Oversee integration between EPM platforms and security tooling (Qualys, Defender for Endpoint) for holistic endpoint health management. Client Engagement & Delivery Governance • Serve as primary technical point of contact for assigned EPM accounts — leading governance calls, delivery reviews, and escalation resolution from India. • Drive SLA attainment, delivery quality, and continuous improvement across managed global endpoint accounts. • Contribute to SOW development, effort estimation, and technical proposal documentation for new and expanding EPM engagements. • Mentor and develop Grade 7–9 engineers through technical coaching, design reviews, and structured capability building. • Collaborate with NTT DATA India practice leadership and onshore counterparts on EPM service development and client strategies. REQUIRED SKILLS • Workspace One/Microsoft SCCM/ConfigMgr — site architecture, hierarchy design, OSD, patch management, reporting (expert) • ITSM Tool: BMC Helix • Microsoft Intune — full MDM/MAM lifecycle, co-management, Autopilot, WUfB, Conditional Access (expert) • Windows 10/11 enterprise deployment — task sequences, MDT, WinPE, driver management, ZTP Autopilot • Azure AD / Entra ID — identity-driven EPM, Conditional Access, MFA, device trust, RBAC • PowerShell advanced automation — SCCM SDK, Graph API, reporting pipelines, operational toolin…