SCCM / Intune / Windows Administrator (L3)

Location: Des Moines, IA – Hybrid (3 days work from office). Visa transfer or sponsorship is not available for this role.

Responsibilities

• Endpoint Management
  • Administer and support Microsoft Intune and SCCM/MECM environments.
  • Manage device enrollment, provisioning, and lifecycle management for corporate endpoints.
  • Implement and maintain Autopilot deployments and modern device management solutions.
  • Configure and manage compliance policies, configuration profiles, and endpoint security policies.
• Software Deployment & Patch Management
  • Package, deploy, and maintain enterprise applications using SCCM and Intune.
  • Manage OS and third-party patch deployment across enterprise endpoints.
  • Perform patch compliance reporting and remediation activities.
  • Monitor software distribution and application deployment success rates.
• Windows Administration
  • Administer and support Windows 10 and Windows 11 environments.
  • Manage operating system upgrades, feature updates, and migration projects.
  • Troubleshoot operating system, performance, and endpoint-related issues.
  • Maintain Windows security baselines and compliance standards.
• Endpoint Security & Compliance
  • Implement endpoint security controls and vulnerability remediation programs.
  • Work closely with security teams to remediate vulnerabilities within SLA.
  • Support Microsoft Defender, BitLocker, Defender for Endpoint, and related security technologies.
  • Ensure compliance with organizational and regulatory security requirements.
• Infrastructure & Troubleshooting
  • Diagnose and resolve SCCM client, Intune enrollment, application deployment, and Windows device issues.
  • Perform root cause analysis (RCA) for recurring incidents.
  • Support enterprise endpoint infrastructure, distribution points, and management points.
  • Handle escalations and provide L3 technical support.
• Automation & Reporting
  • Develop PowerShell scripts for administration and automation.
  • Generate operational dashboards, compliance reports, and executive status reports.
  • Monitor endpoint health and service performance metrics.
• Documentation & Governance
  • Maintain operational runbooks, SOPs, and technical documentation.
  • Support audit requests and compliance reviews.
  • Participate in change, incident, problem, and release management processes.

Requirements

• Endpoint Management
  • Microsoft Endpoint Configuration Manager (SCCM/MECM)
  • Microsoft Intune
  • Microsoft Endpoint Manager
  • Windows Autopilot
  • Co-Management
• Windows Administration
  • Windows 10 / Windows 11 Administration
  • Active Directory
  • Group Policy Administration
  • Windows Security & Hardening
• Security & Compliance
  • Microsoft Defender for Endpoint
  • BitLocker
  • Endpoint Security Policies
  • Vulnerability Remediation
• Scripting & Automation
  • PowerShell
  • Windows Automation Scripts
• ITSM & Operations
  • ServiceNow / ITSM Platforms
  • Incident, Change & Problem Management
  • Root Cause Analysis (RCA)

Preferred Skills

• Azure AD / Entra ID
• Microsoft 365 Administration
• Windows Virtual Desktop / Azure Virtual Desktop
• Cloud device management
• Endpoint Analytics
• Zero Trust Security Concepts

Key Competencies

• Strong troubleshooting and problem-solving skills
• Customer-focused service orientation
• Excellent communication and stakeholder management
• Ability to work in a 24x7 managed services environment
• Experience working within SLAs and governance processes

Pay

The annual salary for this position is between $49,001 and $92,000, depending on experience and qualifications. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance.

Benefits

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contribution
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan