System Administrator - Endpoint & Client Technologies

We are seeking a mid-level System Administrator to own the management, security, and reliability of our end-user computing environment, with a primary focus on Microsoft Intune and modern client technologies. This is a hands-on role responsible for the full device lifecycle - provisioning, configuration, patching, application delivery, and compliance - across a Microsoft-centric estate. The ideal candidate pairs deep endpoint management expertise with solid working knowledge of the underlying infrastructure (identity, networking, servers, and cloud) so they can troubleshoot end to end and partner effectively with infrastructure, security, and service desk teams., * Microsoft Intune administration - manage device enrollment, configuration profiles, compliance policies, and Conditional Access integration across Windows, iOS, and macOS.

• Modern provisioning - build and maintain Windows Autopilot deployment, zero-touch provisioning, and standardized device baselines.
• Application packaging & delivery - package, deploy, and update applications via Intune (Win32, MSI, Microsoft Store), and manage app protection policies.
• Patch & update management - operate Windows Update for Business / Autopatch rings, monitor compliance, and remediate failures.
• Endpoint security posture - configure and maintain Microsoft Defender for Endpoint, BitLocker, attack-surface-reduction, and security baselines in partnership with the security team.

Infrastructure & Identity

• Identity & access - administer Microsoft Entra ID (Azure AD) - users, groups, dynamic groups, device identity, and hybrid join; support SSO and MFA.
• Microsoft 365 - support and administer M365 services (Exchange Online, Teams, SharePoint/OneDrive) as they relate to the client experience.
• Infrastructure support - apply working knowledge of Active Directory, Group Policy, DNS/DHCP, Windows Server, networking fundamentals, and Azure to troubleshoot issues end to end.
• Automation - use PowerShell (and Graph API where applicable) to automate routine administration, reporting, and remediation., * Enterprise AI client administration - deploy, configure, and manage AI desktop clients such as Claude (Cowork), ChatGPT Desktop, and Google Gemini at an enterprise level, including packaged deployment through Intune.
• Configuration & governance - configure enterprise tenant settings, authentication (SSO/SCIM), data controls, and admin policies to align with company security and AI governance standards.
• Extending the platforms - set up and support tools, plugins, skills, connectors/MCPs, and projects/workspaces that extend AI client capabilities for business teams.
• Enablement & support - act as a technical resource for safe, productive adoption of AI desktop tools, troubleshoot client issues, and document standard configurations and guardrails., * Escalation support - act as Tier 2/3 escalation for endpoint and client technology issues from the service desk.
• Documentation & standards - maintain runbooks, configuration standards, and knowledge-base articles; contribute to a well-governed, standardized environment.
• Reliability & monitoring - monitor device health, compliance, and reporting; proactively identify and resolve recurring problems.
• Cross-team collaboration - partner with infrastructure, cybersecurity, and enterprise applications teams on projects and rollouts.

Do you have experience in UEM?, Do you have a Bachelor's degree?, * 8+ years of experience in system administration, endpoint management, or desktop engineering.

• Demonstrated hands-on experience administering Microsoft Intune / Endpoint Manager in a production environment.
• Strong experience with Windows 10/11 client management, Windows Autopilot, and application packaging/deployment.
• Working knowledge of Microsoft Entra ID (Azure AD), Conditional Access, and Microsoft 365 administration.
• Solid foundation in infrastructure technologies: Active Directory, Group Policy, DNS/DHCP, Windows Server, and core networking concepts.
• Proficiency with PowerShell scripting for automation and reporting.
• Experience with endpoint security tooling (e.g., Microsoft Defender for Endpoint, BitLocker).
• Strong troubleshooting skills and the ability to work independently in a fast-paced environment.
• Familiarity with AI desktop clients - such as Claude (Cowork), ChatGPT Desktop, and Google Gemini - including enterprise-level configuration, deployment, and management of tools, plugins, skills, connectors, and projects/workspaces.
• Excellent communication skills and a service-oriented mindset., * Relevant Microsoft certifications (e.g., MD-102 Endpoint Administrator, MS-102, AZ-104, or SC-300).
• Experience managing macOS and/or iOS devices through Intune.
• Familiarity with Azure infrastructure (virtual machines, networking, storage).
• Experience with the Microsoft Graph API and modern reporting/dashboarding.
• Exposure to enterprise real estate, property management, or corporate environments at scale.
• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.

Pulled from the full job description

• AD&D insurance

• Health insurance

• 401(k) matching

• Paid time off

• Vision insurance

• Health savings account

• Dental insurance, The anticipated base salary range for this position is listed below. In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives and a comprehensive benefits package. Anticipated base salary range: $130,000 - $150,000 / year Actual base salary within the anticipated range will be determined by several components including, but not limited to, the individual's experience, skills, qualifications, and market factors., Rotating hybrid schedule (Week 1 [3 days onsite - 2 days remote] / Week 2 [2 days onsite - 3 days remote] / & vice versa) : Week 1 - Tues / Thurs Week 2 - Tues / Thurs / Fri Week 3 - Tues / Thurs Week 4 - Tues / Thurs / Fri, * Personalized Health Care: Multiple medical, dental, and vision plan options; Employee Assistance Program

• Financial Benefits: Competitive salary and incentive packages; matching 401(k); FSAs and HSA; employer-paid life and AD&D insurance; paid leave & disability programs

• Social Wellness: 19+ days of PTO; mental health counseling & resources; fertility, surrogacy, and adoption assistance; volunteer days and donation matching

• Career Development: Learning & training programs; tuition & certification reimbursement; internal advancement opportunities

Formed in 1972, Related is the most prominent privately owned real estate firm in the United States. Headquartered in New York City, the company has offices and major developments across the world. Related owns and manages a premier portfolio of assets valued at over $70 billion, including the 28-acre Hudson Yards neighborhood on Manhattan's West Side. Related believes in investing in its talent and cultivates a positive, team-oriented environment where every voice is valued. Employees are encouraged to boldly take on new challenges, transcend the status quo, and demonstrate strong entrepreneurial spirit. In its relentless commitment to excellence, Related works to foster an innovative approach in its team members so that they can positively impact the communities in which they conduct business. Learn more about Related at www.related.com. We are proud to be an equal opportunity employer and are deliberate about the team and culture we are building. We aim to ensure competitive total compensation that is commensurate with experience, workplace geography, and market standards. For information about how we use your personal information, including information submitted for career opportunities, please review our Privacy Policy at https://www.related.com/privacy-policy.