System Administrator, Endpoint Management

Responsibilities

• Administer and support enterprise endpoints across Windows desktops and servers, macOS, and Linux.
• Use Microsoft Intune and Tanium as primary endpoint management platforms for daily endpoint administration and operational management such as:
• Endpoint visibility and real-time inventory
• Machine compliance monitoring and enforcement
• Operating system and third-party software updates
• Software packaging, deployments, and remediation
• Vulnerability identification and remediation
• Manage Windows endpoints using Microsoft Intune and Group Policy Objects (GPO).
• Manage macOS endpoints using Jamf, including configuration profiles, policies, and application deployments.
• Execute and track vulnerability remediation efforts, ensuring timely patching and risk reduction across all endpoint platforms.
• Support and maintain enterprise cloud print solutions.
• Collaborate with cybersecurity, infrastructure, and service teams to ensure endpoint configurations align with security standards and operational requirements.
• Implementation and management of endpoint security baselines and configuration standards aligned with CIS Security Controls.
• Create and maintain documentation, standard operating procedures, and operational runbooks.
• Participate in continuous improvement initiatives focused on strengthening endpoint security, automation, and operational efficiency.

Qualifications

• Bachelor's degree or equivalent experience
• Minimum of Three (3) years of relevant experience
• Proven experience managing enterprise desktops and servers in a large-scale environment
• Hands-on operational experience administering endpoints using Microsoft Intune
• Strong working knowledge of: Microsoft Intune (Windows endpoint management), Windows Autopilot, Group Policy (GPO), Jamf (macOS management)
• Experience administering Windows desktop and server environments
• Working knowledge of macOS and Linux administration
• Demonstrated experience managing machine compliance, software patching, and vulnerability remediation
• Strong troubleshooting skills and experience operating in a large, complex enterprise environment
• Experience implementing or supporting device compliance policies and their integration with conditional access controls using Microsoft Intune and Microsoft Entra ID

Preferred Qualifications

• Additional hands-on experience using Tanium for endpoint management, compliance reporting, patching, and software deployment
• Familiarity with modern endpoint security concepts such as least privilege, zero trust, and compliance baselines
• Experience supporting cloud-first or hybrid endpoint management strategies