SOE Engineer (Intune & Security Policies)
- Location
- Melbourne, 161 Collins Street, Level 5; Brisbane, 10 Eagle Street; Canberra, 65 Canberra Avenue Bldg; Sydney, International House, 3 Sussex St; Adelaide, 30 Pirie Street; Perth, Exchange Tower
- Work mode
- On-site
- Employment type
- Full-time
About the job
Role Description The SOE Engineer is responsible for the design, build, configuration, and validation of the Windows 11 Standard Operating Environment (SOE) within the client environment. The role focuses on Microsoft Intune, Windows Autopilot, security baselines, compliance policies, device configuration, application deployment, and endpoint security controls to ensure devices meet client operational and security requirements.
Working closely with architects, security specialists, and deployment teams, the SOE Engineer develops and implements device management and policy configurations, supports endpoint onboarding processes, and ensures consistent deployment and operation of the SOE across the EUC fleet.
You must be an Australian citizen to apply; security clearance is highly regarded.
Key Responsibilities
- Design, build, and maintain the Windows 11 SOE.
- Configure Microsoft Intune device management policies and profiles.
- Implement Windows Autopilot provisioning and enrolment processes.
- Deploy and manage security baselines, compliance policies, and endpoint protection controls.
- Configure conditional access dependencies and device compliance integrations.
- Package, deploy, and manage applications through Microsoft Intune.
- Support device provisioning, rebuild, and onboarding processes.
- Validate endpoint compliance with client security and operational requirements.
- Develop SOE documentation, build procedures, and operational guidance.
• Support testing, pilot deployments, and transition to operations activities.
- Support testing, pilot deployments, and transition to operations activities.
- Microsoft Intune
- Windows 11 Administration
- Windows Autopilot
- Endpoint Security Management
- Microsoft Entra ID
- Device Compliance Policies
- Configuration Profiles
- Security Baselines
- Microsoft Defender for Endpoint
- Application Packaging and Deployment
- Win32 Application Management
- Endpoint Analytics
- Conditional Access Integration
- Device Provisioning and Lifecycle Management
- Endpoint Troubleshooting and Support
• PowerShell Automation . Preferred Experience
- Microsoft Intune and Endpoint Management implementations.
- Windows 11 SOE design and deployment.
- Windows Autopilot provisioning and large-scale endpoint rollouts.
- Microsoft Defender for Endpoint and endpoint security controls.
- Government or highly regulated environments.
- Enterprise endpoint management and security transformation programs.
• Migration from traditional endpoint management platforms to Microsoft Intune.
- Migration from traditional endpoint management platforms to Microsoft Intune.
From 4405 Avanade Italy Srl Company's careers page (Workday), checked 29 Oct 2026.
How to apply
- Select Apply on avanade.com. It opens 4405 Avanade Italy Srl Company's own application form in a new tab, run on Workday.
- Fill in the form and upload your résumé there. Jobiwork never sees your application.
- 4405 Avanade Italy Srl Company will reply to you directly. No real employer asks you for money to apply.
Posted 19 Oct 2026 · checked 29 Oct 2026 · Report this job