Endpoint Engineer - Microsoft 365, Intune & Endpoint Security

Blue Light IT is a managed IT and cybersecurity firm in Boca Raton. We're hiring an Endpoint Engineer to own the Microsoft 365 and endpoint side of our work across Windows and Mac.

This is a hands-on Level 2/3 role with real ownership. You'll run Intune and Entra ID, drive projects and change requests to completion, handle front-line security work, and work directly with customers. It's a mix of advanced support, backend administration, and project work, not a pure ticket queue.

What you'll do

• Advanced (L2/3) support for Windows and Mac endpoints, Microsoft 365, user accounts, permissions, and applications
• Manage and troubleshoot endpoints in Microsoft Intune: configuration profiles, compliance policies, app deployment, enrollment
• Administer Microsoft Entra ID and the M365 stack: Exchange Online, SharePoint, Teams, and OneDrive
• Plan, execute, and document change requests and technical projects
• Handle front-line security work: alert triage, phishing and endpoint investigations, account-compromise review, and customer-facing follow-up, escalating to our SOC 〔/ security partners〕 when needed
• Maintain clear technical documentation and keep tickets moving with real follow-through
• Identify and act on ways to improve systems, security, automation, and the customer experience

What you need

• 5+ years in IT support, including 2+ years at the L2/3 or systems-administration level (MSP or customer-facing strongly preferred)
• Hands-on Microsoft 365 administration, Entra ID, and Intune in a production environment
• Strong endpoint support on both Windows and Mac (Mac fluency is required, not a nice-to-have)
• Excellent written and verbal communication, and documentation habits that don't need chasing
• Self-motivated and dependable: you move work forward without being managed task by task

Bonus points

• PowerShell scripting and automation
• Apple Business Manager and enrolling Apple devices into Intune as the MDM
• Hands-on security tooling: 〔your actual EDR/MDR, RMM, patch and vulnerability management platforms〕
• Experience supporting SOC workflows: alert triage, investigations, and incident response
• Relevant Microsoft certifications (e.g. MD-102, MS-102)

What it's like here
We're a small team that takes real pride in the work and backs the people who do it well. You'll own your projects end to end, see the impact of what you fix, and have room to grow into deeper security and infrastructure work. We hold a high bar and we keep our word, to our customers and to each other.