Endpoint Administrator

Dexian has an immediate opportunity available for a detail-oriented and motivated Endpoint Administrator with MS Intune experience to manage, maintain, and optimize a unified endpoint management environment for our premier aerospace customer. The Endpoint Administrator will be the primary point of contact for the deployment, configuration, compliance, and security of all corporate-owned and BYOD (Bring Your Own Device) endpoints. Utilizing the Microsoft 365 stack-specifically Microsoft Intune and Microsoft Entra -you will ensure seamless, secure hardware and software life cycles across Windows and iOS platforms.

• Policy & Profile Management: Build, test, and deploy Intune configuration profiles, compliance policies, and security baselines to standardize client environments.
• Application Packaging & Deployment: Package, test, and distribute internal and third-party software updates, web links, and store apps across the enterprise.
• Modern Provisioning: Administer and monitor modern device deployment systems, such as Windows Autopilot and Apple Business Manager, ensuring a zero-touch or minimal-touch provisioning pipeline for new hires.
• Identity & Access Control: Collaborate with identity teams to manage device registration, primary user changes, group memberships, and targeted Conditional Access enforcement.
• Troubleshooting & Escalations: Act as the Tier 2/3 escalation point for device enrollment failures, application installation blocks, and profile synchronization issues.
• Reporting & Governance: Monitor Intune reporting dashboards daily to identify non-compliant devices, update patch status deficiencies, and remediate systemic configuration drift.
• Documentation: Maintain clear, concise documentation outlining deployment processes, app packaging standards, and device lifecycle flows.

To be successful in this role, you should possess the following skills:

• Security Stack Exposure: Familiarity integrating Intune with security tools like Microsoft Defender for Endpoint or implementing data protection via MAM (Mobile Application Management) without full device enrollment.
• Problem-Solving & Analytical Rigor: A structured, logical approach to debugging deployment failures, policy conflicts, and log file analysis.
• Cross-Functional Communication: The ability to explain technical enrollment steps or security restrictions clearly and empathetically to non-technical business professionals.
• Adaptability: Curiosity and willingness to stay current with Microsoft's continuous cloud release notes, feature changes, and best-practice evolutions.

To be eligible for this position, you must meet or exceed each of the following:

• Experience: Four to six (4
  - 6) years of progressive experience in IT systems administration, with a minimum of 2-3 years dedicated specifically to managing and deploying policies within Microsoft Intune (Cloud-only or Hybrid/co-management configurations).
• Technical Ecosystem Knowledge: Solid foundation in Microsoft 365 workloads, including Microsoft Entra  (formerly Azure Active Directory), Conditional Access policies, and Group Policy Objects (GPOs).
  • Ability to install, configure, monitor and troubleshoot Microsoft and third-party enterprise applications across large endpoint environments.
  • Maintain desktop and application packaging of standard, engineered, and tested configurations for remote distribution utilizing Microsoft Endpoint Configuration Manager (MECM) and Intune.
  • Managing endpoint configuration, compliance, and automation through enterprise tools such as MECM/SCCM, Intune
    , or similar technologies.
• OS Support: Demonstrated experience configuring, enrolling, and troubleshooting Windows 10/11 endpoints. Basic exposure to managing mobile operating systems (iOS) via MDM…