> Markdown version of [/jobs/ext/4245634-microsoft-intune-systems-administrator-remote](https://www.wearedevelopers.com/jobs/ext/4245634-microsoft-intune-systems-administrator-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Intune Systems Administrator (REMOTE) - **Company:** Koniag Services, Inc. - **Location:** Chantilly, VA, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Apple Mac Systems, Bash Shell, BitLocker Drive Encryption, Mobile Application Software, Windows API, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Shell Script, Systems Integration, Microsoft InTune, Azure Security Center, Deployment Automation, Apple Business Manager, Casper Suite, 3-tier Architectures, CIS Benchmarks, Multiplatform - **Published:** October 23, 2026 - **Apply:** https://dejobs.org/x/x/69BCBDE4AC574123A3485DFB104973F1/job/ ## About the Role * Bachelor's with 12+ years of system administration experience (or commensurate experience) * 3-5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Microsoft Intune / Endpoint Manager * Hands-on experience integrating Apple Business Manager (ABM) with Intune, VPP app management, FileVault management, and running Bash scripts onmacOS. * JAMF knowledge preferred * Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration * Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines (MAM without enrollment), and Company Portal deployment Clearance Required: * Ability to maintain a HUD Public Trust clearance ## Description * Multi-Platform Device Lifecycle Management * Autopilot, Apple Automated Device Enrollment (ADE) via Apple Business Manager (ABM), and iOS/iPadOS enrollment * payloads, and shell scripts (Bash) for custom settings and elevated controls * PowerShell scripts, and Remediation scriptsApplication Packaging & Deployment * Package, test, and deploy applications across all platforms (Win32, LOB, licensing) * Windows, macOS, and mobile apps Security & Compliance: * Implement Conditional Access policies, App Protection Policies (MAM), and Compliance Policies linked with Microsoft Defender for Endpoint * Manage disk encryption standards across platforms (BitLocker for Windows, FileVault for macOS) macOS endpoints Operational Support & Monitoring: * Act as Tier 3 escalation for endpoint-related technical issues across * Monitor tenant health, device compliance failures, sync errors, and security vulnerabilities; remediate non-compliant assets promptly * Maintain accurate technical documentation, enrollment guides, and end- user self-service instruction