Senior System Administrator Endpoint Management & Enterprise Infrastructure

Position Summary

We are seeking an experienced System Administrator to manage the security, reliability, and performance of our end-user computing environment, with a primary focus on Microsoft Intune, modern endpoint management, and enterprise client technologies. This hands-on role is responsible for the full device lifecycle, including provisioning, configuration, patching, application deployment, compliance, and endpoint security across a Microsoft-centric environment.

The ideal candidate combines deep expertise in endpoint management with a strong foundation in identity, infrastructure, networking, cloud technologies, and enterprise AI platforms. This individual will partner closely with infrastructure, cybersecurity, and service desk teams to deliver secure, scalable, and efficient technology solutions.

Key Responsibilities

Endpoint & Client Management

• Administer Microsoft Intune and Endpoint Manager, including device enrollment, configuration profiles, compliance policies, and Conditional Access integrations across Windows, macOS, and mobile devices.
• Design, implement, and maintain Windows Autopilot deployments, zero-touch provisioning, and standardized device configurations.
• Package, deploy, update, and manage enterprise applications, including Win32, MSI, and app store applications.
• Manage operating system patching and update processes, monitor compliance, and remediate deployment issues.
• Configure and maintain endpoint security controls, including encryption, endpoint detection and response (EDR), security baselines, and attack surface reduction policies.
• Monitor endpoint health, performance, and compliance metrics to proactively identify and resolve issues.

Identity & Infrastructure Administration

• Administer cloud and hybrid identity platforms, including user and group management, device identity, authentication services, and access controls.
• Support and maintain Microsoft 365 services, including email, collaboration, file-sharing, and productivity platforms.
• Troubleshoot issues across identity, endpoint, server, cloud, and networking environments.
• Maintain and support Active Directory, Group Policy, DNS, DHCP, Windows Server, and core networking services.
• Implement and maintain multi-factor authentication (MFA), single sign-on (SSO), and identity governance controls.

Automation & Systems Management

• Develop and maintain PowerShell scripts and automation workflows to streamline administrative tasks, reporting, monitoring, and remediation activities.
• Leverage APIs and automation tools to improve operational efficiency and reduce manual effort.
• Support endpoint standardization and configuration management initiatives.

Enterprise AI Platform Administration

• Deploy, configure, and support enterprise AI desktop applications and productivity platforms.
• Manage authentication, access controls, governance settings, and administrative policies for AI platforms.
• Configure and support tools, plugins, skills, connectors, integrations, and collaborative workspaces that extend AI platform capabilities.
• Partner with cybersecurity and business stakeholders to ensure AI technologies align with governance, compliance, and data protection requirements.
• Act as a technical resource for AI platform adoption, troubleshooting, and end-user enablement.
• Develop documentation, standards, and best practices for enterprise AI tool usage.

Operations & Support

• Provide Tier 2 and Tier 3 escalation support for endpoint, desktop, and workplace technology issues.
• Maintain technical documentation, operational procedures, runbooks, standards, and knowledge-base articles.
• Monitor system performance, reliability, compliance, and reporting to identify recurring issues and improvement opportunities.
• Collaborate with infrastructure, cybersecurity, enterprise applications, and support teams on technology projects and deployments.
• Participate in technology rollouts, upgrades, and operational initiatives.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.
• 8+ years of experience in systems administration, endpoint management, desktop engineering, or enterprise IT operations.
• Demonstrated hands-on experience administering Microsoft Intune / Endpoint Manager in a production environment.
• Strong experience managing Windows 10 and Windows 11 endpoints, Windows Autopilot, and enterprise application deployment.
• Working knowledge of Microsoft Entra ID (Azure AD), Conditional Access, and Microsoft 365 administration.
• Solid foundation in infrastructure technologies, including Active Directory, Group Policy, DNS, DHCP, Windows Server, and networking fundamentals.
• Proficiency with PowerShell scripting for automation, administration, and reporting.
• Experience with endpoint security technologies, including Microsoft Defender for Endpoint, BitLocker, and related security controls.
• Strong troubleshooting, analytical, and problem-solving skills with the ability to work independently in a fast-paced environment.
• Familiarity with enterprise AI desktop platforms, including deployment, configuration, governance, and management of tools, plugins, connectors, skills, and collaborative workspaces.
• Excellent communication, documentation, and interpersonal skills with a strong service-oriented mindset.

Preferred Qualifications

• Relevant Microsoft certifications, such as Endpoint Administrator, Microsoft 365 Administrator, Azure Administrator, Identity and Access Administrator, or equivalent.
• Experience managing macOS and/or iOS devices through Microsoft Intune.
• Familiarity with Azure infrastructure services, including virtual machines, networking, and storage.
• Experience utilizing APIs, automation frameworks, and modern reporting or dashboarding solutions.
• Experience supporting large-scale corporate, real estate, property management, hospitality, or enterprise environments.
• Additional certifications in cloud administration, endpoint management, security, or infrastructure technologies.

Compensation

Base Salary Range: $130,000 $150,000 annually

Actual compensation will be determined based on experience, technical expertise, certifications, qualifications, and market conditions. Additional bonus opportunities and a comprehensive benefits package may be available.

Work Arrangement

Rotating Hybrid Schedule

This position follows a rotating hybrid work schedule consisting of onsite and remote work.

Week 1: 2 onsite days (Tuesday and Thursday), 3 remote days

Week 2: 3 onsite days (Tuesday, Thursday, and Friday), 2 remote days

The schedule alternates on a bi-weekly basis throughout the year.