Patch Compliance Engineer - Intune - US

We are CirrusLabs . Our vision is to become the world's most sought-after niche digital transformation company that helps customers realize value through innovation. Our mission is to co-create success with our customers, partners and community. Our goal is to enable employees to dream, grow and make things happen. We are committed to excellence. We are a dependable partner organization that delivers on commitments. We strive to maintain integrity with our employees and customers. Every action we take is driven by value. The core of who we are is through our well-knit teams and employees. You are the core of a values driven organization.
You have an entrepreneurial spirit. You enjoy working as a part of well-knit teams. You value the team over the individual. You welcome diversity at work and within the greater community. You aren't afraid to take risks. You appreciate a growth path with your leadership team that journeys how you can grow inside and outside of the organization. You thrive upon continuing education programs that your company sponsors to strengthen your skills and for you to become a thought leader ahead of the industry curve.
You are excited about creating change because your skills can help the greater good of every customer, industry and community. We are hiring a talented < J ob Title >to join our team. If you're excited to be part of a winning team, CirrusLabs( ) is a great place to grow your career.
Role Summary
As a Security Compliance Engineer - Intune Workstation Patching, you will serve as the team's modern device management and Microsoft Intune expert. You will lead efforts to configure, deploy, and manage endpoint patches using Intune, ensuring alignment with Microsoft's cloud-first approach to device compliance.
You will play a key role in helping the organization transition from legacy SCCM-based deployments to Intune-centric patching workflows, including the use of Autopatch and mobile device management features. Your work will drive automation, improve compliance visibility, and reduce patching complexity across the enterprise.
Key Responsibilities
Intune-Centric Patch Management

• Configure and manage patch deployment policies using Microsoft Intune

• Build and maintain compliance baselines, configuration profiles, and targeting groups

• Collaborate with Autopatch teams to support hybrid and cloud-native environments

• Align Intune workflows with SCCM, PatchMyPC, and Qualys-driven remediation priorities

• Participate in patch calendar planning, scripting, and deployment lifecycle optimization

• Automate deployment of updates across diverse endpoint groups using Windows Update for Business and Autopatch

• Monitor compliance, remediate drift, and support modern provisioning strategies (e.g., Intune + Autopilot)

• Support dashboards and reporting related to Intune compliance and deployment success

• Coordinate with vulnerability and operations teams to align patch data with Qualys and SLA metrics

• Qualys, Qualys VMDR

• Microsoft Intune, Windows Autopatch, SCCM

• Cloud Update, SCCM

• PatchMyPC, SCCM, Qualys VMDR, Nexthink

• 5+ years of experience in endpoint security or IT operations, with deep focus on Microsoft Intune

• Demonstrated experience configuring Intune patch policies, compliance settings, and update rings

• Experience integrating Intune with SCCM, PatchMyPC, or Autopatch in enterprise environments

• Strong understanding of cloud-first device management, Windows Update for Business, and modern endpoint provisioning

• Scripting knowledge (e.g., PowerShell) to support automated remediation workflows

• Strong collaboration and communication skills

• Experience in large enterprise environments with 100,000+ endpoints

• Familiarity with Microsoft Autopilot and modern provisioning pipelines

• Knowledge of compliance standards (e.g., CIS Benchmarks, NIST)

• Experience with vulnerability management and risk orchestration tools, such as Brinqa and Vulcan

• Prior involvement in SCCM-to-Intune transformation initiatives