Senior Endpoint / Intune Engineer- remote
At a glance
Senior Systems Administration role at Inetum. Remote, Romania · full-time.
Pay not stated Systems Administration salary
remoteroles summary, based on the employer's posting.
What you'll do
- Review the 115 current Group Policies with Microsoft Group Policy Analytics and plan their replacement structure in Intune
- Configure, test and gradually deploy the policies, then remove the legacy Group Policy setup
- Create alternatives for settings Intune cannot directly match, including scripts, drive mappings and printers
- Deploy Windows LAPS, verify cloud storage of BitLocker keys, and clear out stale accounts and devices
- Help run phased rollout rings and measure the pilot
What you bring
- Senior-level work in endpoint and Intune engineering
- Strong command of Group Policy internals, including scripts, security settings and firewall configuration
- Hands-on experience with Group Policy Analytics and the Intune Settings Catalog
- Experience with ADMX imports, OMA-URI, remediation scripts, Windows LAPS and BitLocker key escrow
Who this fits
This suits a senior endpoint engineer who can rebuild Group Policy configurations in Intune and manage a staged deployment. The project is planned for three months, with a possible extension. The role is remote in Bucharest.
From the employer
Inetum is a European leader in digital services. For businesses, public sector organizations, and society as a whole, the group’s 26,000 consultants and specialists work every day to create tangible digital impact: solutions that contribute to performance, innovation, and the common good.
With a presence in 19 countries, working closely with local communities, and alongside its major software developer partners, Inetum supports organizations in their digital transformation challenges with proximity, flexibility, and responsibility. Driven by its purpose, Inetum champions a vision of technology that is useful and well-managed, capable of unlocking the full potential of organizations and society: “Let’s make tech right.”
In 2025, the group generated revenue of 2.2 billion euros.
More information at: www.inetum.com
Project duration: 3 months, with the possibility of extension
Mission
Rebuild the settings currently pushed to computers through Group Policy in Microsoft Intune.
Responsibilities
- Analyse the 115 existing Group Policies using Microsoft Group Policy Analytics.
- Design how the settings will be structured in Intune.
- Build, test and roll out all settings in stages, then retire the old Group Policies.
- Find workarounds for settings without a direct Intune equivalent, including scripts, drive mappings and printers.
- Roll out Windows LAPS.
- Check that BitLocker disk-encryption keys are stored in the cloud.
- Clean up unused accounts and old devices.
- Support ring-based rollout and pilot measurement.
- Senior-level experience in Endpoint / Intune engineering.
- Strong knowledge of Group Policy internals, including:
- GPP
- Scripts
- Security options
- Firewall
- Experience with Group Policy Analytics.
- Experience with Intune Settings Catalog.
- Experience with ADMX import.
- Experience with OMA-URI.
- Experience with remediation scripts.
- Experience with Windows LAPS.
- Experience with BitLocker key escrow.
- Awareness of Autopilot and Universal Print.
Benefits
- Full access to foreign language learning platform
- Personalized access to tech learning platforms
- Tailored workshops and trainings to sustain your growth
- Medical insurance
- Meal tickets
- Monthly budget to allocate on flexible benefit platform
- Access to 7 Card services
- Wellbeing activities and gatherings