> Markdown version of [/jobs/ext/3609349-microsoft-intune-system-administrator](https://www.wearedevelopers.com/jobs/ext/3609349-microsoft-intune-system-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Microsoft Intune System Administrator

- **Company:** GovCIO
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $145,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Apple IOS, Apple Mac Systems, Bash Shell, Biometrics, BitLocker Drive Encryption, Mobile Application Software, Windows API, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Shell Script, Single Sign-On, Software Deployment, Systems Integration, Microsoft InTune, Azure Security Center, Deployment Automation, Apple Business Manager, Casper Suite, 3-tier Architectures, CIS Benchmarks, Multiplatform
- **Published:** October 7, 2026
- **Apply:** https://dejobs.org/x/x/633B4DE3779F4583BF580758DC0A08EC/job/

## About the Role

* Bachelor's with 12+ years of system administration experience (or commensurate experience)
 * 3-5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Microsoft Intune / Endpoint Manager
 * Hands-on experience integrating Apple Business Manager (ABM) with Intune, VPP app management, FileVault management, and running Bash scripts on macOS. JAMF knowledge preferred
 * Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration
 * Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines
 * Experience configurating iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment

Clearance Required: Ability to maintain a HUD Public Trust clearance, * A valid photo ID must be presented during each interview

 * During the Hiring Process
 * Enhanced Biometrics ID verification screening
 * Background check, to include:
 * Criminal history (past 7 years)
 * Verification of your highest level of education
 * Verification of your employment history (past 7 years), based on information provided in your application

## Description

We are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem for our HUD contract. IWe are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem. In this role, you will design, deploy, and maintain zero-touch device enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS devices. The ideal candidate has hands-on technical expertise in unified endpoint management (UEM), Apple Business Manager (ABM), Windows Autopilot, and cloud-first security baselines

This position will be located within the United States and is fully remote.

Responsibilities

 * Multi-Platform Device Lifecycle Management
 * Configure and maintain zero-touch onboarding for all platforms: Windows Autopilot, Apple Automated Device Enrollment (ADE) via Apple Business Manager (ABM), and iOS/iPadOS enrollment
 * Manage macOS configuration profiles, mobile device management (MDM) payloads, and shell scripts (Bash) for custom settings and elevated controls
 * Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and Remediation scripts
 * Application Packaging & Deployment
 * Package, test, and deploy applications across all platforms (Win32, LOB, Microsoft Store, macOS PKG/DMG files, and iOS App Store / VPP volume licensing)
 * Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps
 * Security & Compliance
 * Implement Conditional Access policies, App Protection Policies (MAM), and Compliance Policies linked with Microsoft Defender for Endpoint
 * Manage disk encryption standards across platforms (BitLocker for Windows, FileVault for macOS)
 * Configure identity integrations, Single Sign-On (SSO), and Platform SSO for macOS endpoints
 * Operational Support & Monitoring
 * Act as Tier 3 escalation for endpoint-related technical issues across Windows, Mac, and mobile fleets
 * Monitor tenant health, device compliance failures, sync errors, and security vulnerabilities; remediate non-compliant assets promptly
 * Maintain accurate technical documentation, enrollment guides, and end-user self-service instructions