Systems Admin, Endpoint Management

Collinwood is assisting our client, one of the world's largest and most recognized charitable foundations, in its effort to hire a skilled Endpoint Management System Administrator to support and operate a modern enterprise endpoint environment. This is a highly hands-on operational role responsible for administering and maintaining enterprise endpoint management platforms, with daily use of Microsoft Intune and Tanium to manage endpoint configuration, compliance, patching, and software deployments.

The ideal candidate will have strong experience managing Windows and macOS endpoints, with working knowledge of Linux, and will be comfortable performing daily endpoint administration tasks using Microsoft Intune and Tanium. These platforms are used extensively for endpoint visibility, machine compliance, vulnerability remediation, software updates, and software deployments. Jamf is also used to manage macOS systems within the environment.

What you will be doing: 

• Administer and support enterprise endpoints across Windows desktops and servers, macOS, and Linux.
• Use Microsoft Intune and Tanium as primary endpoint management platforms for daily endpoint administration and operational management such as:
  • Endpoint visibility and real-time inventory
  • Machine compliance monitoring and enforcement
  • Operating system and third-party software updates
• Software packaging, deployments, and remediation
• Vulnerability identification and remediation
• Manage Windows endpoints using Microsoft Intune and Group Policy Objects (GPO).
• Manage macOS endpoints using Jamf, including configuration profiles, policies, and application deployments.
• Execute and track vulnerability remediation efforts, ensuring timely patching and risk reduction across all endpoint platforms.
• Support and maintain enterprise cloud print solutions.
• Collaborate with cybersecurity, infrastructure, and service teams to ensure endpoint configurations align with security standards and operational requirements.
• Implementation and management of endpoint security baselines and configuration standards aligned with CIS Security Controls.
• Create and maintain documentation, standard operating procedures, and operational runbooks.
• Participate in continuous improvement initiatives focused on strengthening endpoint security, automation, and operational efficiency.

What we need from you:

• Bachelor's degree or equivalent experience
• Minimum of Three (3) years of relevant experience
• Proven experience managing enterprise desktops and servers in a large-scale environment.
• Hands-on operational experience administering endpoints using Microsoft Intune.
  Strong working knowledge of:
  • Microsoft Intune (Windows endpoint management)
  • Windows Autopilot
  • Group Policy (GPO)
  • Jamf (macOS management)
  • Experience administering Windows desktop and server environments.
  • Working knowledge of macOS and Linux administration.
  • Demonstrated experience managing machine compliance, software patching, and vulnerability remediation.
  • Strong troubleshooting skills and experience operating in a large, complex enterprise environment.
  • Experience implementing or supporting device compliance policies and their integration with conditional access controls using Microsoft Intune and Microsoft Entra ID.

Preferred Qualifications

• Additional hands-on experience using Tanium for endpoint management, compliance reporting, patching, and software deployment.
• Experience managing third-party application updates across diverse endpoint platforms.
• Familiarity with modern endpoint security concepts such as least privilege, zero trust, and compliance baselines.
• Experience supporting cloud-first or hybrid endpoint management strategies.