Candidates should have familiarity with Microsoft Entra ID, Active Directory, device identities, security groups, and access management, as well as endpoint security technologies and practices such as BitLocker, Windows LAPS, security baselines, vulnerability remediation, endpoint privilege management, and Zero Trust principles. Responsibilities include deploying, configuring, maintaining, and troubleshooting Windows endpoints using technologies such as Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, Microsoft Entra ID, Active Directory, PowerShell, and Microsoft Graph.