Systems Administrator-Endpoint Operations & Security

Key Responsibilities

Endpoint Management & Administration

• Administer endpoint management platforms including Microsoft Intune, Windows Update for Business, RMM tools, and endpoint security solutions.
• Manage device enrollment, compliance policies, software deployment, and endpoint standards.
• Maintain workstation lifecycle processes including provisioning, deployment, refresh, and retirement.
• Support endpoint configuration baselines, security policies, and hardening initiatives.

Patch Management

• Own patch management processes for Windows servers and workstations.
• Coordinate testing, deployment, validation, and reporting of operating system and application updates.
• Monitor patch compliance against defined SLAs.
• Schedule and execute maintenance windows with minimal business disruption.
• Support emergency and out-of-band patching for critical vulnerabilities.

Vulnerability Management

• Monitor vulnerability scanning platforms and remediation dashboards.
• Triage vulnerabilities based on severity, exploitability, and business risk.
• Coordinate remediation activities with infrastructure, networking, application owners, and vendors.
• Track remediation progress and maintain exception documentation.
• Produce vulnerability and remediation metrics for leadership and compliance reporting.

RMM & Monitoring

• Administer Remote Monitoring and Management (RMM) platforms.
• Develop monitoring standards and alerting thresholds.
• Investigate recurring alerts and eliminate noise through automation and process improvements.
• Create automated remediation workflows where appropriate.
• Monitor endpoint health, software inventory, disk utilization, service status, and system performance.

Security Operations Support

• Assist with endpoint security tools including Microsoft Defender, SentinelOne, FortiClient, and related technologies.
• Investigate endpoint security alerts and coordinate escalation when required.
• Support audits, compliance initiatives, and security assessments.
• Maintain endpoint security baselines and enforce remediation activities.

Asset & CMDB Management

• Maintain accurate endpoint inventory and asset records.
• Reconcile data across Intune, Active Directory, Entra ID, RMM, vulnerability scanners, and CMDB platforms.
• Ensure endpoint ownership, lifecycle status, and configuration data remain current.
• Identify and resolve discrepancies in asset records.

Documentation & Process Improvement

• Develop and maintain operational runbooks and support documentation.
• Identify opportunities for automation using PowerShell and other scripting tools.
• Create dashboards and reporting to improve visibility into endpoint health and compliance.
• Continuously improve endpoint management processes and operational efficiency.

Required Qualifications

• 5+ years of experience in systems administration, endpoint administration, or infrastructure operations within a Windows-based enterprise environment.
• Experience managing Windows desktop environments.
• Experience with Microsoft Intune and Entra ID.
• Experience with patch management platforms and methodologies.
• Experience administering or supporting vulnerability management programs.
• Familiarity with endpoint security platforms.
• Strong troubleshooting and root-cause analysis skills.
• Experience with PowerShell scripting and automation.
• Strong documentation and organizational skills.

Preferred Qualifications

• Experience with endpoint management, RMM, and vulnerability management platforms such as Microsoft Intune, NinjaOne, ConnectWise RMM, Tenable, Rapid7, Microsoft Defender Vulnerability Management, or similar solutions.
• Experience with Microsoft Defender for Endpoint, SentinelOne, FortiClient EMS, Windows Autopilot, and Freshservice CMDB.
• Experience working in manufacturing or multi-site enterprise environments.
• Experience supporting cybersecurity initiatives aligned with CMMC, NIST, CIS Controls, or similar frameworks.