This role configures and monitors Autopilot enrollment, provisioning profiles, and enrollment status pages for new devices, and authors and maintains compliance, configuration, and security baseline policies across Windows and mobile endpoints. It runs the monthly patch and OS update cycle end to end, covering pilot rings, deployment windows, and exception handling, and packages, deploys, and troubleshoots applications across managed device groups using both Intune and Configuration Manager. Day to day, the specialist investigates failed installs, sync errors, and non-compliant devices and remediates at scale wherever possible, while maintaining Configuration Manager infrastructure, distribution points, collections, and boundary group health. The role produces device health, patch-compliance, and update-adoption reporting for delivery and security leadership, manages co-management workloads and progressively migrates devices from Configuration Manager to Intune, and supports Windows feature-update readiness testing, application compatibility checks, and rollout planning. All endpoint policy changes are raised and executed through the change process with supporting test evidence and rollback plans.