Windows Device Management Platform Owner

By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use. I further attest that all information I submit in my employment application is true to the best of my knowledge.

Job Description

Position Summary

We are seeking an experienced and technically deep Windows Device Management Platform Owner to own and drive the global endpoint management strategy for approximately 50,000 Windows devices across our worldwide operations. This is a high-impact technical leadership role responsible for the full device lifecycle — from provisioning and configuration to monthly patching, security hardening, and decommission — while coordinating a distributed team of contractors across time zones.

The ideal candidate combines hands-on technical mastery in Microsoft Intune, SCCM/MEMCM, PowerShell scripting, and application packaging with the organizational skills to lead, mentor, and direct an offshore delivery team. You will serve as the primary liaison between endpoint engineering, security, and business stakeholders, ensuring our endpoint estate is compliant, resilient, and operationally excellent.

Key Responsibilities

Endpoint Management & Strategy

• Architect, maintain, and continuously improve the global Windows device management platform using Microsoft Intune and SCCM/MEMCM (co-management and cloud-only environments).
• Define and own configuration baselines, enrollment profiles, compliance policies, and conditional access rules across the ~50,000 endpoint estate.
• Drive the organization's modernization roadmap toward cloud-native device management (Autopilot, Intune-only, co-management).
• Oversee device lifecycle management including provisioning, imaging, refresh cycles, and decommissioning procedures.

Patching & Vulnerability Management

• Own the end-to-end monthly Patch Tuesday cycle: planning, ring-based deployment, remediation tracking, and executive reporting.
• Manage software update servicing (WSUS/SUP, Intune Update Rings, Windows Autopatch) and ensure SLA compliance across all global regions.
• Partner with the Security Operations team to remediate critical and high vulnerabilities within agreed SLO windows.
• Maintain a documented patching run book and escalation path for failures and exceptions.

Security Policy & Compliance (CIS & MDE)

• Implement and enforce CIS Benchmark controls for Windows (Level 1 and Level 2) across the global fleet via Intune configuration profiles and SCCM baselines.
• Own the Microsoft Defender for Endpoint (MDE) deployment, configuration, and health monitoring — including onboarding policies, ASR rules, tamper protection, and threat & vulnerability management.
• Collaborate with the Security team to operationalize MDE alerts, Secure Score improvements, and endpoint detection & response (EDR) posture.
• Conduct periodic compliance reporting against CIS benchmarks and remediate drift; maintain audit-ready documentation.
• Manage and tune Intune compliance and conditional access policies to enforce Zero Trust principles.

PowerShell & Scripting

• Develop, maintain, and peer-review PowerShell scripts for automation across device management tasks including compliance remediation, reporting, inventory, and configuration drift detection.
• Build and maintain CI/CD-friendly script repositories with version control (Git), testing frameworks, and documentation standards.
• Leverage Graph API and PowerShell SDK for Intune to automate tenant configuration, bulk operations, and reporting.
• Champion scripting best practices and provide guidance/code reviews to contractor team members.

Application Packaging & Deployment

• Lead application packaging efforts including Win32 apps (Intune), MSI/EXE/MSIX transforms, and SCCM packages/task sequences.
• Define and maintain application packaging standards, testing procedures, and approval workflows.
• Manage the application catalog, ensuring software is current, licensed, and securely deployed.
• Coordinate with software vendors and internal stakeholders to resolve packaging challenges and dependency conflicts.

Team Leadership & Offshore Coordination

• Lead, coordinate, and quality-assure the work of a team of offshore contractors based primarily in India, including task assignment, sprint planning, and performance feedback.
• Establish clear SLAs, runbooks, and escalation paths to ensure consistent delivery quality across time zones.
• Conduct regular stand-ups, knowledge-transfer sessions, and technical mentorship for the contractor team.
• Manage staffing levels, onboarding, and knowledge continuity to minimize single points of failure.
• Collaborate closely with IT leadership to prioritize the team's backlog against project and operational demands.

Documentation, Reporting & Governance

• Maintain comprehensive documentation for all device management processes, configurations, and operational procedures.

…