Endpoint Administrator
Role details
Job location
Tech stack
Job description
Dexian has an immediate opportunity available for a detail-oriented and motivated Endpoint Administrator with MS Intune experience to manage, maintain, and optimize a unified endpoint management environment for our premier aerospace customer. The Endpoint Administrator will be the primary point of contact for the deployment, configuration, compliance, and security of all corporate-owned and BYOD (Bring Your Own Device) endpoints. Utilizing the Microsoft 365 stack-specifically Microsoft Intune and Microsoft Entra ID-you will ensure seamless, secure hardware and software lifecycles across Windows and iOS platforms.
A typical workday may consist of the following duties as directed by the client:
- Policy & Profile Management: Build, test, and deploy Intune configuration profiles, compliance policies, and security baselines to standardize client environments.
- Application Packaging & Deployment: Package, test, and distribute internal and third-party software updates, web links, and store apps across the enterprise.
- Modern Provisioning: Administer and monitor modern device deployment systems, such as Windows Autopilot and Apple Business Manager, ensuring a zero-touch or minimal-touch provisioning pipeline for new hires.
- Identity & Access Control: Collaborate with identity teams to manage device registration, primary user changes, group memberships, and targeted Conditional Access enforcement.
- Troubleshooting & Escalations: Act as the Tier 2/3 escalation point for device enrollment failures, application installation blocks, and profile synchronization issues.
- Reporting & Governance: Monitor Intune reporting dashboards daily to identify non-compliant devices, update patch status deficiencies, and remediate systemic configuration drift.
- Documentation: Maintain clear, concise documentation outlining deployment processes, app packaging standards, and device lifecycle flows.
Requirements
- Security Stack Exposure: Familiarity integrating Intune with security tools like Microsoft Defender for Endpoint or implementing data protection via MAM (Mobile Application Management) without full device enrollment.
- Problem-Solving & Analytical Rigor: A structured, logical approach to debugging deployment failures, policy conflicts, and log file analysis.
- Cross-Functional Communication: The ability to explain technical enrollment steps or security restrictions clearly and empathetically to non-technical business professionals.
- Adaptability: Curiosity and willingness to stay current with Microsoft's continuous cloud release notes, feature changes, and best-practice evolutions.
- JAMF experience, desired
To be eligible for this position, you must meet or exceed each of the following:
- Experience: 6-8 years of progressive experience in IT systems administration, with a minimum of 2-3 years dedicated specifically to managing and deploying policies within Microsoft Intune (Cloud-only or Hybrid/co-management configurations).
- Technical Ecosystem Knowledge: Solid foundation in Microsoft 365 workloads, including Microsoft Entra ID (formerly Azure Active Directory), Conditional Access policies, and Group Policy Objects (GPOs).
- OS Support: Demonstrated experience configuring, enrolling, and troubleshooting Windows 10/11 endpoints. Basic exposure to managing mobile operating systems (iOS) via MDM (Mobile Device Management) profiles.
- Scripting Essentials: Basic proficiency with PowerShell for writing, editing, and deploying automated scripts or application wrappers to endpoints.
- Core Infrastructure: Solid understanding of core networking and identity concepts, including TCP/IP, DNS, DHCP, and modern identity provisioning.
This position requires an active Department of Defense security clearance at the SECRET level or ability to obtain and maintain this clearance., * Associate's degree or higher required
- Possession of or progress toward the Microsoft Certified: Endpoint Administrator Associate (MD-102) certification., * Submit/Pass a 10-year background check, criminal history, drug screening, and fingerprints.
- Valid driver's license/Real-ID with clean driver's history.
- Applicants must have a strong work ethic, be extremely organized and detail-oriented, be a self-starter with excellent time management, problem solving, and multitasking skills.
- Excellent face-to-face customer service skills - at least 1 year experience in a customer service position, such as: call center, retail, or other customer facing role.
- Demonstrated problem solving skills with ability to research, resolve and complete tasks within pre-determined deadlines and schedules.
- Able to process work quickly and accurately despite interruptions, changing timelines and priorities, on a regular basis.
- Strong command of Microsoft Office Suite including Outlook, Excel, and Word programs.
- Working knowledge of app/database ticketing systems. Knowledge of ServiceNow, a plus.
- Position may require dexterity and ability to sit, stand, walk extended distances.
Benefits & conditions
- Dexian reasonably expects to offer $38.00 - $45.00 per hour for this position based on location, skills and experience. Additional benefits include generous time off, health, vision and dental insurance and matching 401k.