SOE Engineer (Intune & Security Policies)
Read straight from Avanade's careers page, verified 2d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationMelbourne, 161 Collins Street, Level 5; Brisbane, 10 Eagle Street; Canberra, 65 Canberra Avenue Bldg; Sydney, International House, 3 Sussex St; Adelaide, 30 Pirie Street; Perth, Exchange Tower
Typefull-time
Company size10,000+ people
PostedOct 19, 2026 · 2w ago
Verified live2d ago
At a glanceSummarised by Seekless from the posting.
Security clearance highly regarded
Must be an Australian citizen
Skills
Microsoft Intune
Windows 11 Administration
Windows Autopilot
Endpoint Security Management
Microsoft Entra ID
Device Compliance Policies
Configuration Profiles
Security Baselines
Microsoft Defender for Endpoint
Application Packaging and Deployment
Win32 Application Management
Endpoint Analytics
Conditional Access Integration
Device Provisioning and Lifecycle Management
Endpoint Troubleshooting
PowerShell Automation
Role Description
The SOE Engineer is responsible for the design, build, configuration, and validation of the Windows 11 Standard Operating Environment (SOE) within the client environment. The role focuses on Microsoft Intune, Windows Autopilot, security baselines, compliance policies, device configuration, application deployment, and endpoint security controls to ensure devices meet client operational and security requirements.
Working closely with architects, security specialists, and deployment teams, the SOE Engineer develops and implements device management and policy configurations, supports endpoint onboarding processes, and ensures consistent deployment and operation of the SOE across the EUC fleet.
You must be an Australian citizen to apply; security clearance is highly regarded.
Key Responsibilities
•
Design, build, and maintain the Windows 11 SOE.
•
Configure Microsoft Intune device management policies and profiles.
•
Implement Windows Autopilot provisioning and enrolment processes.
•
Deploy and manage security baselines, compliance policies, and endpoint protection controls.
•
Configure conditional access dependencies and device compliance integrations.
•
Package, deploy, and manage applications through Microsoft Intune.
•
Support device provisioning, rebuild, and onboarding processes.
•
Validate endpoint compliance with client security and operational requirements.
•
Develop SOE documentation, build procedures, and operational guidance.
•
Support testing, pilot deployments, and transition to operations activities.
Key Skills
•
Microsoft Intune
•
Windows 11 Administration
•
Windows Autopilot
•
Endpoint Security Management
•
Microsoft Entra ID
•
Device Compliance Policies
•
Configuration Profiles
•
Security Baselines
•
Microsoft Defender for Endpoint
•
Application Packaging and Deployment
•
Win32 Application Management
•
Endpoint Analytics
•
Conditional Access Integration
•
Device Provisioning and Lifecycle Management
•
Endpoint Troubleshooting and Support
•
PowerShell Automation
Nice to have
.
Preferred Experience
•
Microsoft Intune and Endpoint Management implementations.
•
Windows 11 SOE design and deployment.
•
Windows Autopilot provisioning and large-scale endpoint rollouts.
•
Microsoft Defender for Endpoint and endpoint security controls.
•
Government or highly regulated environments.
•
Enterprise endpoint management and security transformation programs.
•
Migration from traditional endpoint management platforms to Microsoft Intune.
.