> Markdown version of [/jobs/ext/4032558-windows-endpoint-administrator](https://www.wearedevelopers.com/jobs/ext/4032558-windows-endpoint-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Windows Endpoint Administrator - **Company:** University of North Texas - **Location:** Denton, TX, United States (Remote available) - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Application Packaging, Computing Platforms, User Authentication, Microsoft Azure, BitLocker Drive Encryption, Microsoft Online Services, Cloud Computing, Cloud Engineering, Configuration Management, System Configuration, Systems Theories, Identity and Access Management, System Center Configuration Manager, Windows API, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Software Deployment, Software Vulnerability Management, Windows Desktop, EndPointSecurity, Enterprise Software Applications, Firewalls (Computer Science), Microsoft InTune, Information Technology, Deployment Automation, Patch Management, CIS Benchmarks, U-Boot, Unified Endpoint Management - **Published:** October 30, 2026 - **Apply:** https://diversityjobs.com/career/18788988/Windows-Endpoint-Administrator-Texas-Denton ## About the Role Bachelor's degree in related field and four years of related computing work experience; or any equivalent combination of education, training and experience. Knowledge, Skills and Abilities Endpoint Management: Understanding of Windows device lifecycle management, including provisioning, deployment, maintenance, upgrades, retirement, and secure decommissioning. Application and Update Management: Ability to package, deploy, update, and troubleshoot Windows applications using Intune and MECM/SCCM, along with managing operating system updates, drivers, and phased deployments. Scripting and Automation: Ability to develop and maintain PowerShell scripts for endpoint configuration, software deployment, automated remediation, and reporting. Endpoint Security: Knowledge of security best practices, including least privilege, BitLocker, Windows LAPS, Windows Firewall, Secure Boot, vulnerability remediation, and Zero Trust principles. Identity and Access Management: Familiarity with Microsoft Entra ID, Active Directory, device identities, Group Policy, security groups, and endpoint administrative-access controls. Monitoring and Troubleshooting: Ability to analyze endpoint inventory, deployment, compliance, and security data; troubleshoot hardware, software, authentication, and configuration issues; and assist with endpoint reporting and analytics. Documentation and Collaboration: Ability to maintain technical documentation, standard operating procedures, and change records while collaborating effectively with university IT teams and stakeholders. Preferred Qualifications Preferred qualifications include experience or familiarity with enterprise Windows endpoint management, including Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, and device lifecycle management. Knowledge of PowerShell scripting, automation, configuration management, and automated remediation is highly desirable. Candidates should have familiarity with Microsoft Entra ID, Active Directory, device identities, security groups, and access management, as well as endpoint security technologies and practices such as BitLocker, Windows LAPS, security baselines, vulnerability remediation, endpoint privilege management, and Zero Trust principles. Additional preferred experience includes: Packaging, deploying, and maintaining Win32 applications across enterprise environments. Managing Windows operating system updates, patching, and device provisioning. Supporting migrations from MECM/SCCM to Microsoft Intune and other cloud-based endpoint management solutions. Developing automation and remediation solutions using PowerShell, Microsoft Graph, or other APIs. Using Rapid7 or comparable vulnerability-management platforms to identify and remediate security vulnerabilities. Supporting specialized computing environments, including research systems, academic laboratories, and scientific instrumentation. Participating in enterprise IT projects, following established service-management practices, and collaborating across technical teams. Working in higher-education or similarly complex enterprise IT environments. Required License/Registration/Certifications Preferred certifications include Microsoft Certified: Endpoint Administrator Associate, Identity and Access Administrator Associate, and Azure Administrator Associate, or equivalent certifications. ## Description This position serves as a technical resource within Academic Technologies IT Infrastructure, supporting the administration, security, automation, and lifecycle management of Windows endpoints across university academic and administrative environments. Working as part of a team, the position supports devices used by faculty, staff, students, classrooms, laboratories, research facilities, and specialized academic computing environments. Responsibilities include deploying, configuring, maintaining, and troubleshooting Windows endpoints using technologies such as Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, Microsoft Entra ID, Active Directory, PowerShell, and Microsoft Graph. The position plays an important role in the transition from MECM/SCCM and traditional imaging to modern, cloud-based endpoint management through Microsoft Intune, with an emphasis on automated provisioning, application deployment, security compliance, and endpoint lifecycle management. Additionally, the position develops and supports automation solutions to improve operational efficiency, endpoint security, and reliability while collaborating with university IT teams, faculty, researchers, and vendors to address technical challenges and support institutional needs., * Endpoint Management and Administration Administer and maintain Windows endpoints using Microsoft Intune and Microsoft Configuration Manager (MECM/SCCM), with an emphasis on transitioning endpoint management from MECM to Intune and modern cloud-based management practices. * Device Provisioning and Lifecycle Management Deploy, configure, and manage Windows devices using Windows Autopilot and other approved provisioning technologies. * Application Packaging and Deployment Package, deploy, update, and troubleshoot applications using Intune, MECM/SCCM, and other enterprise software-management tools. Support the migration of application deployments from MECM to Intune. * Operating System Updates and Patch Management Manage Windows feature updates, quality updates, drivers, and deployment rings. * Endpoint Security and Compliance Maintain endpoint security controls, including Defender for Endpoint, BitLocker, Windows LAPS, and security baselines. Support vulnerability remediation and compliance monitoring. * PowerShell Scripting and Automation Develop and maintain scripts and automation for endpoint configuration, application deployment, remediation, and reporting. * Identity and Access Management Support endpoint identities and access controls using Microsoft Entra ID and Active Directory, including device joins, security groups, and administrative permissions. * Troubleshooting, Documentation, and Collaboration Troubleshoot endpoint issues, maintain technical documentation, and collaborate with university IT teams to support faculty, staff, students, classrooms, laboratories, and research environments. Physical Requirements Communicating with others to exchange information. Sedentary work that primarily involves sitting/standing. Environmental Hazards No adverse environmental conditions expected. Work Schedule M-F 8-5 (2 days remote) Driving University Vehicle No Security Sensitive This is a Security Sensitive Position. Special Instructions Applicants must submit a minimum of two professional references as part of their application. If needed, additional references can be added after the application has been submitted.