Endpoint Migration Subject Matter Expert - Quest ODM, Entra ID & Intune

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Endpoint Migration Subject Matter Expert - Quest ODM, Entra ID & Intune

Location(s): Troy, MI


Job Summary
The Endpoint Migration Subject Matter Expert will provide technical leadership for an enterprise Windows endpoint migration program. This role is responsible for defining and validating migration approaches across Quest On Demand Migration (ODM), Active Directory, Microsoft Entra ID, Microsoft Intune, Windows Autopilot, device identity, policy transition, and endpoint validation.

The SME will guide engineering teams, troubleshoot complex migration issues, maintain technical standards, and provide evidence-based recommendations for pilot and production migration readiness.

Responsibilities

• Serve as the subject matter expert for Hybrid Active Directory/Entra ID and Entra-only endpoint migration patterns.
• Provide hands-on technical guidance for Quest ODM design and configuration, including Directory Sync, identity and device matching, Device Agent, migration profiles, network profiles, ReACL, migration waves, cutover, validation, and rollback.
• Define and maintain technical entry and exit criteria, success measures, hard-stop conditions, exception handling, and rollback requirements for pilot and production migration waves.
• Provide technical direction for Active Directory joins, target OU placement, Entra registration and Hybrid Join, Intune enrollment, Windows Autopilot, Windows profiles, GPO and Intune policy transitions, certificates, and endpoint security.
• Perform advanced root-cause analysis of systemic migration failures and coordinate remediation across endpoint, identity, network, PKI/NAC, security, application, and migration-tool teams.
• Review migration scripts, automation, profiles, configuration changes, and runbook updates before controlled implementation.
• Guide engineering teams and L1/L2 support, establish escalation thresholds, and ensure recurring fixes are incorporated into knowledge articles and standard operating procedures.
• Evaluate live-workstation testing evidence and provide technical readiness recommendations to program leadership and command-center teams.
• Maintain complete and traceable technical evidence, configuration baselines, issue records, decisions, exceptions, and validation results.
• Facilitate technical working sessions and coordinate actions across engineering teams and third-party specialists.
• Support hypercare activities, lessons learned, operational documentation, and continuous improvement of migration processes.

Required Technical Skills

• Enterprise Windows endpoint migration architecture, migration-pattern design, pilot and production-wave readiness, rollback planning, and exception management.
• Quest On Demand Migration (ODM), including ODMAD, Directory Sync, identity and device matching, Device Agent, migration and network profiles, ReACL, migration waves, cutover, and job analysis.
• Microsoft Active Directory, Microsoft Entra ID, Microsoft Intune, Hybrid Entra Join, Entra-only devices, and Windows Autopilot.
• Windows 10/11 endpoint engineering, PowerShell, Group Policy Objects (GPO), Intune policies, Windows profiles, device enrollment, compliance, Windows Hello, and BitLocker.
• DNS, PKI and certificates, Network Access Control (NAC), VPN, Conditional Access, endpoint security, and application and network dependencies.
• Advanced troubleshooting across identity, endpoint management, authentication, policy, certificates, network access, and user profiles.

Required Qualifications and Experience

• Demonstrated experience designing, implementing, or providing expert technical support for enterprise Windows endpoint migration solutions.
• Deep practical knowledge of Active Directory, Microsoft Entra ID, Microsoft Intune, and Windows device identity.
• Proven ability to diagnose and resolve complex endpoint migration failures across multiple technical domains.
• Experience designing controlled pilots, migration waves, technical acceptance criteria, rollback gates, and hypercare processes.
• Ability to translate technical findings into actionable decisions, remediation plans, runbook updates, and operational guidance.
• Strong communication and collaboration skills, with the ability to work effectively with engineering teams, program leadership, command centers, and stakeholders.
• Ability to provide authoritative technical guidance, engineering assurance, and evidence-based readiness recommendations.

Preferred Qualifications

• Hands-on experience with Quest On Demand Migration (ODM) is strongly preferred.
• Candidates with comparable enterprise endpoint migration leadership experience may be considered if they demonstrate strong Microsoft endpoint engineering expertise.

Leadership and Role Boundaries

• Provide authoritative technical guidance, advanced troubleshooting, engineering assurance, and migration readiness recommendations.
• Support engineering consultants and L1/L2 execution teams without replacing program governance, business approval, change authorization, architecture authority, or technical tower ownership.
• Provide technical evidence and recommendations to support go/no-go and design decisions made through the approved governance structure.
• Escalate design decisions, unresolved cross-team dependencies, and significant production risks through established governance processes.

Expected Outcomes

• An approved, repeatable, and supportable endpoint migration design across required device patterns.
• Validated Quest ODM configuration baselines, scripts, profiles, runbooks, and technical controls.
• Evidence-based pilot and production-wave readiness recommendations.
• Rapid identification and resolution of systemic endpoint migration issues.
• Consistent technical execution across engineering, support, command-center, and hypercare teams.
• Comprehensive validation of Active Directory, Entra ID, Intune, policies, certificates, endpoint security, connectivity, user profiles, and critical applications.
• Clearly defined exception, rollback, and escalation paths to protect business continuity and user access.
• Improved migration repeatability through updated knowledge articles, technical standards, lessons learned, and operational documentation.

Working Relationships

• Provide technical guidance to endpoint migration consultants and support L1/L2 execution teams.
• Collaborate with program leadership, command-center teams, IAM/Active Directory, Intune/EUC, network, PKI/NAC, security, service desk, application teams, and migration-tool support.
• Coordinate cross-functional remediation and escalate material technical risks through the approved governance model.

Work Arrangement

• Onsite role in Troy, Michigan.
• Travel to Troy, Michigan, and/or Dublin, Ireland, may be required.
• Candidates must have a valid passport and any required visa or travel authorization for international travel.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.