Systems Administrator-Endpoint Operations & Security

Key Responsibilities

• Endpoint Management & Administration
  • Administer endpoint management platforms including Microsoft Intune, Windows Update for Business, RMM tools, and endpoint security solutions.
  • Manage device enrollment, compliance policies, software deployment, and endpoint standards.
  • Maintain workstation lifecycle processes including provisioning, deployment, refresh, and retirement.
  • Support endpoint configuration baselines, security policies, and hardening initiatives.
• Patch Management
  • Own patch management processes for Windows servers and workstations.
  • Coordinate testing, deployment, validation, and reporting of operating system and application updates.
  • Monitor patch compliance against defined SLAs.
  • Schedule and execute maintenance windows with minimal business disruption.
  • Support emergency and out-of-band patching for critical vulnerabilities.
• Vulnerability Management
  • Monitor vulnerability scanning platforms and remediation dashboards.
  • Triage vulnerabilities based on severity, exploitability, and business risk.
  • Coordinate remediation activities with infrastructure, networking, application owners, and vendors.
  • Track remediation progress and maintain exception documentation.
  • Produce vulnerability and remediation metrics for leadership and compliance reporting.
• RMM & Monitoring
  • Administer Remote Monitoring and Management (RMM) platforms.
  • Develop monitoring standards and alerting thresholds.
  • Investigate recurring alerts and eliminate noise through automation and process improvements.
  • Create automated remediation workflows where appropriate.
  • Monitor endpoint health, software inventory, disk utilization, service status, and system performance.
• Security Operations Support
  • Assist with endpoint security tools including Microsoft Defender, SentinelOne, FortiClient, and related technologies.
  • Investigate endpoint security alerts and coordinate escalation when required.
  • Support audits, compliance initiatives, and security assessments.
  • Maintain endpoint security baselines and enforce remediation activities.
• Asset & CMDB Management
  • Maintain accurate endpoint inventory and asset records.
  • Reconcile data across Intune, Active Directory, Entra ID, RMM, vulnerability scanners, and CMDB platforms.
  • Ensure endpoint ownership, lifecycle status, and configuration data remain current.
  • Identify and resolve discrepancies in asset records.
• Documentation & Process Improvement
  • Develop and maintain operational runbooks and support documentation.
  • Identify opportunities for automation using PowerShell and other scripting tools.
  • Create dashboards and reporting to improve visibility into endpoint health and compliance.
  • Continuously improve endpoint management processes and operational efficiency.

Required Qualifications

• 5+ years of experience in systems administration, endpoint administration, or infrastructure operations within a Windows-based enterprise environment.
• Experience managing Windows desktop environments.
• Experience with Microsoft Intune and Entra ID.
• Experience with patch management platforms and methodologies.
• Experience administering or supporting vulnerability management programs.
• Familiarity with endpoint security platforms.
• Strong troubleshooting and root-cause analysis skills.
• Experience with PowerShell scripting and automation.
• Strong documentation and organizational skills.

Preferred Qualifications

• Experience with endpoint management, RMM, and vulnerability management platforms such as Microsoft Intune, NinjaOne, ConnectWise RMM, Tenable, Rapid7, Microsoft Defender Vulnerability Management, or similar solutions.
• Experience with Microsoft Defender for Endpoint, SentinelOne, FortiClient EMS, Windows Autopilot, and Freshservice CMDB.
• Experience working in manufacturing or multi-site enterprise environments.
• Experience supporting cybersecurity initiatives aligned with CMMC, NIST, CIS Controls, or similar frameworks.