Consultant - Solutions Architect

Summary

Join Kalles Group as a Microsoft Solutions Architect to lead a complex migration from SCCM to Microsoft Intune and Entra ID. You will be responsible for both high-level architectural strategy and hands-on engineering execution. This role requires deep experience in Microsoft's modern endpoint management ecosystem and strong hybrid identity knowledge. You will lead client scoping conversations, map out technical plans, and implement solutions. The ideal candidate possesses strong engineering delivery capabilities and a proven track record of successful SCCM-to-Intune migrations. Kalles Group offers a competitive salary, benefits, and a focus on work-life balance.

Requirements

• 10+ years of experience with Microsoft infrastructure, including direct engineering of endpoint and identity solutions
• Proven track record designing and executing SCCM-to-Intune migrations, including device onboarding, app delivery, and co-management
• Hands-on experience configuring and deploying Windows Autopilot in both Azure AD Join and Hybrid Join scenarios
• Expert-level knowledge of Microsoft Intune, including compliance policies, configuration profiles, app protection, and device lifecycle management
• Expertise with Microsoft Entra ID (Azure AD), including hybrid identity architecture, Conditional Access, and governance
• Strong PowerShell scripting skills for automating deployment, device configuration, and policy migration tasks
• Experience supporting hybrid cloud environments and distributed user bases, preferably within manufacturing or industrial sectors

Responsibilities

• Lead scoping and technical discovery sessions with client stakeholders to assess SCCM, Intune, and hybrid Entra ID configurations
• Design the end-state modern endpoint management and identity architecture, incorporating zero trust principles, Windows Autopilot, and mobile device management best practices
• Develop a migration strategy and execution plan for transitioning remaining SCCM workloads to Microsoft Intune, including app deployments, compliance policies, configuration profiles, and enrollment workflows
• Define the technical roadmap for hybrid join, cloud policy alignment, and phased deprecation of legacy tooling
• Directly perform detailed level engineering tasks, including configuring Intune policies, compliance rules, application packaging, and deployment profiles
• Build and manage Windows Autopilot deployment profiles and deployment workflows, including device registration, white-glove provisioning (as needed), and hybrid/Entra join integration
• Execute complex hybrid identity configurations in Entra ID, including Conditional Access, hybrid join, SSO, MFA, and device lifecycle governance
• Engineer and optimize co-management scenarios, resolving overlaps and dependencies between SCCM and Intune
• Analyze, migrate, and replace legacy Group Policy Objects (GPOs) using Policy Analytics and PowerShell automation
• Troubleshoot device enrollment issues, Autopilot provisioning errors, app deployment failures, and compliance/reporting anomalies
• Produce comprehensive technical documentation, SOPs, and engineering-level implementation guides for IT operations and support teams
• Collaborate with infrastructure, desktop, and security teams to ensure integration, operational stability, and support readiness during and after migration
• Deliver technical coaching and knowledge transfer sessions to client engineering and support resources

Preferred Qualifications

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Solutions Architect Expert
• Capable of owning the full technical lifecycle from architecture to hands-on execution
• Strong client-facing presence with consultative communication and leadership skills
• Highly organized and analytical, with structured problem-solving ability and focus on delivery
• Comfortable working in partially completed or undocumented environments, reverse-engineering where necessary
• Able to design, build, and validate Windows Autopilot deployments aligned to enterprise operational requirements

Benefits

• Salary range for this role is $140,000-$180,000 per year, dependent on experience
• Medical, dental, vision plans
• 401(k)
• 3 weeks of Paid Time Off, PLUS 8 paid company holidays and 2 flexible holidays for anything you want to celebrate!
• Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload