SCCM / Intune / Windows Administrator (L3)

Experience: 5-10 years.

Responsibilities

• Administer and support Microsoft Intune and SCCM/MECM environments.
• Manage device enrollment, provisioning, and lifecycle management for corporate endpoints.
• Implement and maintain Autopilot deployments and modern device management solutions.
• Configure and manage compliance policies, configuration profiles, and endpoint security policies.
• Package, deploy, and maintain enterprise applications using SCCM and Intune.
• Manage OS and third-party patch deployment across enterprise endpoints.
• Perform patch compliance reporting and remediation activities.
• Monitor software distribution and application deployment success rates.
• Administer and support Windows 10 and Windows 11 environments.
• Manage operating system upgrades, feature updates, and migration projects.
• Troubleshoot operating system, performance, and endpoint-related issues.
• Maintain Windows security baselines and compliance standards.
• Implement endpoint security controls and vulnerability remediation programs.
• Work closely with security teams to remediate vulnerabilities within SLA.
• Support Microsoft Defender, BitLocker, Defender for Endpoint, and related security technologies.
• Ensure compliance with organizational and regulatory security requirements.
• Diagnose and resolve SCCM client, Intune enrollment, application deployment, and Windows device issues.
• Perform root cause analysis (RCA) for recurring incidents.
• Support enterprise endpoint infrastructure, distribution points, and management points.
• Handle escalations and provide L3 technical support.
• Develop PowerShell scripts for administration and automation.
• Generate operational dashboards, compliance reports, and executive status reports.
• Monitor endpoint health and service performance metrics.
• Maintain operational runbooks, SOPs, and technical documentation.
• Support audit requests and compliance reviews.
• Participate in change, incident, problem, and release management processes.

Required Technical Skills

• Microsoft Endpoint Configuration Manager (SCCM/MECM)
• Microsoft Intune
• Microsoft Endpoint Manager
• Windows Autopilot
• Co-Management
• Windows 10 / Windows 11 Administration
• Active Directory
• Group Policy Administration
• Windows Security & Hardening
• Microsoft Defender for Endpoint
• BitLocker
• Endpoint Security Policies
• Vulnerability Remediation
• PowerShell
• Windows Automation Scripts
• ServiceNow / ITSM Platforms
• Incident, Change & Problem Management
• Root Cause Analysis (RCA)

Preferred Skills

• Azure AD / Entra ID
• Microsoft 365 Administration
• Windows Virtual Desktop / Azure Virtual Desktop
• Cloud device management
• Endpoint Analytics
• Zero Trust Security Concepts

Benefits

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contribution
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Pay

The annual salary for this position is between $49,001- $92,000 depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans.

Schedule

Location: Des Moines, IA - Hybrid (3 days work from office)