SECURIX Expert Service

System Engineering Modern Workplace

Experienced system engineers who build and configure your Windows workplace with Microsoft Intune, from device enrolment to security policies, so projects are delivered on time, on budget and to quality.

Solution overview

System Engineering Modern Workplace provides experienced system engineers who build and configure your Windows workplace with Microsoft Intune. Working within your environment and project setup, the engineer handles device enrollment, configuration, security and compliance policies, application deployment and updates. The service focuses on public sector projects and is also available to private companies with complex ICT projects. Your team gains specialist engineering capacity for a centrally managed and consistently configured Windows workplace.

Your business needs

Move workplace modernization forward

Limited engineering capacity

Your IT team keeps the existing environment running while the new workplace needs to be built. Without hands-on Intune expertise, rollout tasks are delayed.

Inconsistent client configuration

Settings differ between devices, creating support work and rework. Central configuration needs to be established consistently.

Incomplete security policies

Security baselines and compliance policies are applied only partially. Encryption, patching and other security settings need consistent configuration across clients.

Who this is for

Intune and Windows expertise within your project

For cantons, cities, federal offices, healthcare and education organizations, and private companies using or moving to Microsoft Intune. The service provides an individual engineer within your existing project organization.

Head of IT / Workplace owners

Specialist capacity to build and configure the modern Windows workplace alongside your existing team.

Project management

Technical delivery capacity for device enrollment, configuration, applications and updates.

Security owners / CISO

Engineering support for consistent security baselines, encryption and compliance policies.

Our deliverables

Build and configure your Windows workplace

  • Device enrolment — Enrolling Windows clients in Microsoft Intune, for example with Windows Autopilot.
  • Security and compliance policies — Configure encryption, compliance rules and security baselines.
  • Update management — Setting up controlled Windows and application updates.
  • Technical documentation — Documenting the setup for operations and audits.
  • Configuration management — Creating configuration profiles and baseline settings for the clients.
  • Application delivery — Packaging and distributing applications.
  • Migration — Moving from local client management to Microsoft Intune.

  • Project leadership, PMO and business analysis
  • Network and VPN engineering
  • Helpdesk and ongoing managed services
  • Full workplace service
  • Licenses, hardware and third-party services

How we deliver

Engineering within your workplace environment

  1. The engineer becomes familiar with your existing Windows workplace and client management setup.

  2. Deliver initial working components, such as a pilot group of enrolled devices with baseline configuration, compliance and security policies.

  3. Work on application deployment, update management, migration and further configuration within your project.

  4. Record the configuration for operations and audits, following your technical standards and change processes.

The first working components are delivered within the first two to four weeks of the assignment. Typical lead time from award to start is two to four weeks, depending on consultant availability. A start under an existing framework agreement can be faster.

Frameworks and methods

Engineering that fits your project setup

HERMES

Work within your HERMES project framework.

Agile

Working within your agile project approach.

Hybrid

Working within your hybrid project approach.

The engineer follows your technical standards and change processes.

References

Modern workplace in practice

Customer reference to follow

Frequently asked questions

Before your workplace engineering assignment begins

Administrative access to the tenant, suitable licenses and a defined pilot group should be in place when the assignment starts.

No. An individual engineer works within your environment and project organization. A full workplace service delivered by a SECURIX team, end-user helpdesk and 24/7 operations are not included.

Yes. Typical tasks include migration from on-premises client management to Microsoft Intune.

Our system engineers work on site using a laptop you provide and follow your project framework, technical standards and change processes. The assignment is billed hourly for the time needed, and support can scale up or down as the project progresses.

Contact

Let’s discuss your next step

Tell us where you stand with your Windows workplace. Together, we’ll clarify the engineering support you need for enrollment, configuration and security policies.

Tobias Kern

Head of Security Advisory

Talk to Tobias