Modern Device Management Endpoint Engineer

DUNDI VYSHNAVI MAJJI

Endpoint Engineer Modern Device Management Intune and SCCM Autopilot Entra ID Jersey City, NJ **************@*****.*** 551-***-**** PROFESSIONAL SUMMARY

Endpoint Engineer with 4 years across modern device management, endpoint security, and end user computing. Builds and operates the full provisioning stack: Windows Autopilot zero touch deployment, Intune and SCCM co management, Entra ID Conditional Access, device compliance policy, and Win32 and MSIX application delivery. Migrates fleets off legacy imaging and onto cloud managed provisioning without disrupting users, and automates the operational load underneath it with PowerShell and Microsoft Graph. Holds the Microsoft Endpoint Administrator Associate credential alongside CompTIA A plus and Network plus, with a Master of Information Systems completed in 2025. TECHNICAL SKILLS

Endpoint Management: Microsoft Intune, SCCM and MECM, co management, Windows Autopilot, zero touch deployment, task sequences, OS deployment, device enrollment, Windows 10 and Windows 11 administration, Azure Virtual Desktop Application Delivery: Software packaging for MSI, MSIX, and Win32 applications, detection and requirement rules, dependencies and supersedence, application lifecycle management, ring based deployment Identity and Security: Active Directory, Microsoft Entra ID, Group Policy, Conditional Access, device compliance policies, BitLocker encryption, Microsoft Defender for Endpoint, multifactor authentication, security baselines Cloud and Productivity: Microsoft 365 administration, Exchange Online, Teams, SharePoint, OneDrive, Microsoft 365 admin center, Entra ID administration

Automation and Operations: PowerShell scripting, Microsoft Graph, patch management, reporting and compliance dashboards, ticketing and incident management, technical documentation and runbooks PROFESSIONAL EXPERIENCE

Endpoint Engineer VNS Health May 2025 to Present

• Zero Touch Provisioning: Rebuilt device provisioning on Windows Autopilot using user driven and pre provisioned profiles, cutting time to a usable device from 4 hours to under 45 minutes and removing the physical imaging bench from the process entirely for remote hires.

• Co Management Migration: Moved 1,200 endpoints from SCCM only management into Intune co management, transitioning compliance, Windows Update, and endpoint protection workloads to the cloud across a phased rollout completed with no unplanned user downtime.

• Conditional Access and Compliance: Authored device compliance policies and Conditional Access rules in Entra ID covering encryption state, minimum OS build, and device risk, closing access from unmanaged and noncompliant devices to corporate resources.

• Application Delivery: Package and publish Win32 and MSIX applications through Intune with detection rules, dependencies, and supersedence chains, lifting first attempt install success from 82 percent to 97 percent across a catalog of 60 applications.

• Windows 11 Migration: Ran hardware readiness assessment and phased upgrade of the Windows 11 estate, sequencing rings from pilot to broad deployment and resolving driver and application compatibility blockers ahead of each wave.

• Automation with PowerShell and Graph: Built PowerShell tooling against Microsoft Graph for bulk device actions, compliance reporting, and automated remediation of failed enrollments, replacing roughly 8 hours of manual console work each week.

• Azure Virtual Desktop: Deployed and maintain AVD host pools with FSLogix profile containers for contract and offshore users, giving managed access to corporate applications without shipping physical hardware. EUC Desktop Engineer Oshkosh Corporation Jan 2023 to Dec 2023

• OS Deployment Engineering: Built and maintained SCCM task sequences, boot images, and driver packages covering 14 hardware models, standardizing the corporate image and taking provisioning failures on refresh cycles to near zero.

• Application Packaging: Packaged and deployed 90 plus MSI and Win32 applications through SCCM with silent install logic and rollback handling, cutting failed deployment rates from 14 percent to under 3 percent through staged pilot and production rings.

• Patch Management: Owned the monthly patch cycle for 2,000 endpoints across software update groups and maintenance windows, sustaining 96 percent compliance within 10 days of release and shortening the exposure window on critical vulnerabilities.

• Group Policy and Security Baselines: Consolidated a sprawling GPO estate into a documented baseline set enforcing BitLocker encryption, Defender policy, USB control, and software restriction, and resolved the policy conflicts that had been causing intermittent logon delays.

• Hardware Refresh Delivery: Executed a fleet refresh of 600 devices across multiple sites, handling data migration, application reinstatement, and user handover on a schedule that kept every user productive the same day.

• Tier 3 Escalation Support: Resolved escalations that the service desk could not close, covering imaging failures, client health, profile corruption, and application conflicts, and fed permanent fixes back into the standard build.

• Documentation and Enablement: Authored the build, packaging, and troubleshooting runbooks the desktop team works from, and trained service desk analysts to independently handle the highest volume endpoint issues. IT Support Engineer Cyient May 2020 to Dec 2021

• Incident Resolution: Handled 35 to 45 tickets weekly across hardware, software, network, and access issues for a user base of 800, holding first call resolution at 90 percent and closing within SLA on every priority tier.

• Active Directory Administration: Processed account creation, group membership, OU placement, and deprovisioning requests, and tightened the offboarding process so departing user access was revoked the same day rather than on a weekly sweep.

• Microsoft 365 Administration: Administered Exchange Online mailboxes, distribution groups, Teams, and OneDrive, resolving mail flow, licensing, and sync issues and handling shared mailbox and delegation changes.

• Onboarding Delivery: Provisioned and delivered fully configured devices and accounts for new starters, coordinating with HR on start dates so every new hire had a working device and full access on day one.

• Endpoint Hardware Support: Diagnosed and repaired laptop and desktop faults, coordinated warranty replacements with vendors, and managed the loaner pool so no user waited on a working machine.

• Knowledge Base Development: Wrote the troubleshooting articles and standard procedures for the most repeated ticket categories, reducing the volume of repeat questions reaching the support queue. CERTIFICATIONS

Microsoft Certified: Endpoint Administrator Associate CompTIA A plus CompTIA Network plus EDUCATION

Master of Information Systems Jan 2024 to May 2025 Pace University New York, NY

Bachelor of Science in Data Science Jun 2018 to Jun 2021 Krishna University India

Contact this candidate