Intune & M365 Administrator

About the role

The Intune & M365 Administrator is responsible for the implementation, administration, and ongoing management of MS Intune and related M365 security policies across ProMach’s 60+ global subsidiaries. This role will collaborate with the Corp IT team to ensure the M365 tenant is in alignment with security best practices. In addition, this position is a key contributor in departmental projects and provides second tier support and training for all technology related issues and inquiries, coordinating with appropriate support departments as necessary.

Responsibilities

• Implementation & Ongoing Administration of Microsoft Intune
• Conditional Access Administration
• Endpoint Security Baseline Policies
• Windows OS Security Patching
• Application Deployments
• Microsoft Defender Administration
• Support, (policies, tagging, etc.)
• M365 Tenant Security Configuration, (Best Practices, Microsoft Secure Score, etc.)
• Azure / M365 Security Monitoring / Incident Response
• Microsoft Purview Data Loss Prevention, (participates in initial planning and implementation)
• Develops and maintains Metrics for M365 & Intune
• Aids with acquisition onboarding process, (email migrations, tool deployments, etc.)
• Tracks IT Security Incidents in ITSM tool, (ServiceNow)
• Aids with maintenance of IT security policies and related procedures
• Aids with general Windows Server, Active Directory, Azure, & O365 support and administration
• Participates in routine server maintenance and assists with recurring Disaster Recovery tests
• Participates in internal and external IT audits and assessments
• Performs second level support for incidents escalated by team members
• Fosters and maintains key vendor / 3rd party service and support relationships
• Performs other duties as assigned

Requirements

• Bachelor’s degree in Information Systems or similar area of technical study; or equivalent combination of education and experience
• 5+ years of experience in the Information Technology field
• Advanced proficiency with Microsoft Intune administration, (enrollment, compliance, conditional access, config profiles, software deployments, update rings, etc.)
• Experience assessing and configuring M365 security to recognize best-practice baselines (Microsoft Secure Score, etc.)
• Experience with endpoint hardening, encryption (BitLocker), Active Directory, NTFS security, and Group Policy
• Experience with application packaging and deployment
• Experience with PowerShell and the Microsoft Graph API for automation and reporting
• Experience with MS Defender for Endpoint policy administration
• Experience with MS Purview or similar DLP solution is desirable
• Experience with MFA solutions, (Duo or similar)
• Familiarity with Azure Arc for server onboarding and management
• Familiarity with enterprise SIEM solutions, (MS Sentinel or similar)
• Familiarity with one or more IT security frameworks, (NIST, ISO, COBIT, MITRE, etc.)
• Ability to communicate with associates at all levels of the organization
• Strong written communications skills with experience writing technical documentation
• Motivated, committed and energetic self-starter dedicated to providing high quality and responsive IT service
• Availability to work evenings and weekends, sometimes with little notice
• Willingness to travel if needed

Qualifications

• ProMach is an Equal Opportunity Employer
• Pro Mach uses E-Verify to verify employment eligibility of all new hires to work in the United States
• Pro Mach is a drug-free workplace