Own day-to-day endpoint management and device security for Windows (and other endpoints as applicable).
Administer Microsoft Intune and Windows Autopilot to deploy, configure, patch, and secure devices.
Provide Tier 2 support for endpoint and access issues.
Ensure devices are compliant, reliable, and ready for employees and contractors.
Maintain device baselines: patching, security settings, disk encryption, and required software.
Partner with Security to monitor and remediate endpoint risks.
Support identity and access tasks in Entra ID (users/groups, MFA, conditional access support, and device join/registration).
Create and maintain documentation (runbooks, standards, and knowledge articles) and keep tickets up to date.

2+ years of experience supporting and managing end-user endpoints in a modern (cloud-first) environment.
Hands-on experience with Microsoft Intune (device enrollment, compliance, configuration, and app deployment).
Experience with Windows Autopilot and lifecycle management (provision, reset, retire).
Working knowledge of Entra ID and modern authentication (SSO, MFA, conditional access).
Strong troubleshooting skills across Windows, Microsoft 365, and common SaaS applications.
Comfortable working independently, prioritizing work, and communicating clearly with end users.
macOS support experience is a plus.
Certifications are a plus (Microsoft, CompTIA, ITIL).

Endpoint Systems Administrator

Key skills