Mohammad S.

Microsoft Intune • Windows Autopilot • Microsoft Endpoint Manager • Entra ID • Conditional Access • Defender for Endpoint Day to day I am the L2/L3 escalation engineer for a managed services provider, working across 25+ Microsoft 365 tenants with NinjaOne as my RMM and ServiceNow for tickets. What reaches me is what first and second line could not place: Autopilot builds that fail at OOBE, Win32 packages that pass detection and still will not install, Conditional Access locking out the wrong people, compromised accounts that need containing and documenting, and tenants that grew fast with nothing written down. Microsoft Intune and Modern Workplace engineer. Sixteen years in IT, eight of them in endpoint management, five on Intune and Autopilot. Most of my work starts the same way. Someone has a tenant that grew fast, nobody wrote anything down, and now enrollments fail for reasons no one can explain. I go in, work out why, and fix it properly. Around 25 Microsoft 365 tenants delivered for MSPs and their clients in the US, UK, Saudi Arabia and Australia, covering several thousand Windows, macOS, iOS and Android devices. Top Rated Plus, 100% Job Success, 10,750 hours logged on Upwork. If you would rather buy a fixed outcome than open ended hours, I do that too. A one week Microsoft 365 security assessment with a scored report and a priced fix list, or a hardening project that implements the roadmap, both quoted before anything starts. WHAT I DO 1. MICROSOFT INTUNE AND ENDPOINT MANAGER Intune deployment and administration on new or existing tenants. Windows, macOS, iOS and Android enrollment. Configuration profiles, compliance policies, endpoint security policies and security baselines. Update rings, BitLocker, patch management. MDM, MAM and app protection policies. Co-management with Configuration Manager (MECM/SCCM). 2. WINDOWS AUTOPILOT Zero touch provisioning end to end. Enrollment Status Page tuning, dynamic group design, driver and application phasing, hybrid and Entra joined deployments, and the OOBE failures that give you no useful error. 3. APPLICATION PACKAGING AND DEPLOYMENT Win32 apps in .intunewin, MSIX, detection and requirement rules, dependencies and supersedence, PSADT wrappers for installers that refuse to run silently. This is where most rollouts actually break. 4. POWERSHELL AND MICROSOFT GRAPH AUTOMATION Bulk enrollment, compliance reporting, proactive remediations, policy backup and restore. If I do something twice by hand I script it the third time. 5. ENTRA ID AND CONDITIONAL ACCESS Hybrid join, MFA, SSPR, PIM, RBAC and least privilege. Zero Trust policy sets that hold up without locking out the people who need to get in. 6. DEFENDER FOR ENDPOINT AND MICROSOFT 365 SECURITY Onboarding across Windows and macOS, ASR rules, security baselines, detection tuning. Purview DLP, sensitivity labels and retention policies. 7. APPLE AND ANDROID FLEETS Apple Business Manager and ADE, Android Enterprise, Jamf Pro alongside Intune for mixed estates. 8. MICROSOFT 365 ADMINISTRATION Tenant configuration, licensing, user and group provisioning, and migrations covering Exchange Online, SharePoint, OneDrive and Teams. CERTIFICATIONS MD-102 Endpoint Administrator Associate and MS-102 Microsoft 365 Administrator Expert, both active through May 2027. 22 Microsoft exams passed in total, including AZ-104, AZ-305, SC-100, SC-200, AZ-800 and AZ-801, plus MCSE Core Infrastructure and MCSE Cloud Platform and Infrastructure. Microsoft transcript available on request. ALSO HIRED AS L2/L3 escalation engineer, MSP engineer, service desk L3, Intune consultant, endpoint engineer, Modern Workplace engineer, MDM administrator, Microsoft 365 administrator, SCCM engineer, device management specialist, Autopilot consultant. Tell me what you are running and roughly how many devices, and I will tell you what the work involves before you commit.