Salman Pasha
Microsoft Intune & Endpoint Management Specialist
Bengaluru,KA
Summary
Microsoft Intune & Endpoint Management Specialist with 10+ years of experience managing enterprise device environments across Windows, macOS, iOS, and Android. Experienced in Intune, Autopilot, Conditional Access, Defender for Endpoint. Proven expertise in endpoint security, device lifecycle management, and enterprise-scale deployments.
Overview
3
3
Certifications
13
13
years of professional experience
Work History
Deputy Technical Specialist
Hexaware Technologies
- Current
- Microsoft Intune & Modern Endpoint Management
- Design, deploy, and maintain enterprise-scale Microsoft Intune solutions for Windows 11, macOS, iOS, and Android devices.
- Configure and manage device compliance policies, configuration profiles, security baselines, and endpoint protection policies.
- Administer Windows Autopilot deployments including User-Driven, Pre-Provisioning, and Zero-Touch deployment scenarios.
- Manage device lifecycle activities including provisioning, configuration, maintenance, troubleshooting, and retirement.
- Deploy and manage Win32 applications, Microsoft Store applications, and Line-of-Business (LOB) applications through Intune.
- Create application detection methods, requirement rules, supersedence relationships, and retirement strategies.
- Configure Conditional Access policies integrated with Microsoft Entra ID to enforce compliance-based access controls.
- Implement endpoint security controls including BitLocker encryption, Microsoft Defender for Endpoint integration, and Attack Surface Reduction (ASR) policies.
- Manage Windows Update for Business (WUfB) policies including Update Rings, Feature Updates, Quality Updates, and Driver Updates.
- Monitor device health, compliance posture, patch compliance, and endpoint analytics through Intune reporting.
- Troubleshoot complex issues related to device enrollment, policy deployment, application installation, Autopilot provisioning, Azure AD Join, and Hybrid Azure AD Join.
- Develop PowerShell scripts for proactive remediations, custom compliance policies, automation, and application deployment enhancements.
- Utilize Microsoft Graph API for automation, reporting, and endpoint management operations.
- Provide Tier 3 support and escalation management for endpoint-related incidents and service requests.
Assistant Consultant
Tata Consultancy Services
01.2015 - 01.2021
- Endpoint Engineering & Modern Workplace Services
- Led enterprise endpoint engineering initiatives supporting 50,000+ Windows, macOS, iOS, and Android devices.
- Managed Microsoft Intune, MECM/SCCM, Co-management, Windows Autopilot, Patch My PC, and Workspace ONE UEM environments.
- Supported Modern Desktop transformation projects including SCCM-to-Intune migration and cloud-managed endpoint adoption.
- Administered endpoint compliance policies, Conditional Access, RBAC, and security governance controls.
- Managed Windows 10/11 operating system lifecycle, feature updates, patch management, and vulnerability remediation.
- Implemented application deployment strategies using Intune Win32 applications, software packaging, deployment rings, and application lifecycle management.
- Supported Group Policy (GPO) assessment and migration to Intune Configuration Profiles and Settings Catalog policies.
- Managed endpoint security controls including BitLocker, Defender for Endpoint, compliance policies, and Zero Trust initiatives.
- Provided advanced L2/L3 troubleshooting for Intune, Workspace ONE, VPN, Windows Update, software deployment, and endpoint connectivity issues.
- Developed automation solutions using PowerShell to improve deployment efficiency and operational reporting.
- Collaborated with engineering, security, and infrastructure teams to deliver endpoint modernization projects using Agile methodologies.
System Engineer
Infosys
01.2014 - 01.2015
- Provided L1 technical support to end users via phone, email, chat, and remote support tools.
- Troubleshot and resolved hardware, software, printer, application, and network-related issues.
- Managed Active Directory user accounts, password resets, and access permissions.
- Supported device provisioning, software installation, system configuration, and onboarding/offboarding activities.
- Handled basic VPN, Wi-Fi, email, and connectivity troubleshooting while supporting Windows OS and Microsoft Office applications.
- Logged, tracked, and escalated incidents through ServiceNow, ensuring SLA compliance and timely resolution.
Education
Bachelor of Engineering - Electronics and Communication engineering
VVIT
Bengaluru, India 04.2001 -
PUC - undefined
Karnataka Pre-University Education
01-2009
SSLC - undefined
Karnataka State Board
01-2007
Skills
Endpoint Management: Microsoft Intune (Endpoint Manager), Windows Autopilot, Modern Desktop, Device Lifecycle Management, Co-management, SCCM/MECM, Endpoint Analytics
Identity & Access Management: Microsoft Entra ID (Azure AD), Conditional Access, RBAC, Hybrid Azure AD Join, Zero Trust
Endpoint Security: Microsoft Defender for Endpoint, Security Baselines, Attack Surface Reduction (ASR), BitLocker, Compliance Policies
Application Management: Win32 App Packaging, IntuneWin Apps, Microsoft Store Apps, LOB Applications, App Protection Policies, Supersedence & App Lifecycle Management
Patch & Update Management: Windows Update for Business (WUfB), Update Rings, Feature & Driver Updates, Vulnerability Remediation
Automation & Scripting: PowerShell, Microsoft Graph API, Proactive Remediations, Custom Compliance Scripts
Platforms: Windows 10/11, macOS, iOS, Android Enterprise, Apple Business Manager
Certification
Microsoft Certified Azure Fundamentals AZ-900
Timeline
Assistant Consultant
Tata Consultancy Services
01.2015 - 01.2021
System Engineer
Infosys
01.2014 - 01.2015
Bachelor of Engineering - Electronics and Communication engineering
VVIT
04.2001 -
SSLC - undefined
Karnataka State Board
PUC - undefined
Karnataka Pre-University Education
Deputy Technical Specialist
Hexaware Technologies
- Current