Desktop Administrator

ABOUT YOU

Are you the go-to problem solver when technology doesn’t cooperate? Do you thrive in a fast-paced environment where no two days are the same? Do you enjoy troubleshooting issues, optimizing systems, and creating a seamless experience for end users? If the answer is “Yes!” then we have an exciting opportunity for you. We are ARCO, a Family of Construction Companies.

We are seeking a proactive and service-oriented Desktop Administrator to support and enhance our Windows-based and cloud-connected environment. In this role, you will be responsible for managing end-user devices, supporting identity and access through Azure Active Directory, and ensuring devices remain secure and compliant using tools like Microsoft Intune.

As a Desktop Administrator, you will serve as a key partner to employees across the organization—resolving technical issues, streamlining device management, and continuously improving the end-user experience. You’ll play a critical role in maintaining operational efficiency, supporting a modern workplace, and helping drive forward our evolving IT environment.

We are dedicated to the well-being of our associates and are proud to be consistently recognized as a Best Place to Work. Our compensation and benefits package not only supports our associates and their families but benefits local communities and communities around the world.

• Industry-leading performance-based bonus program
• Employee Stock Ownership Plan (ESOP)
• Traditional and Roth 401k
• Tuition reimbursement for associates
• Scholarship for associates’ children up to $28,000 per child
• 1-month paid sabbatical after every five years of employment, plus $5,000 for travel
• 1-week paid volunteer leave each year
• 100% charitable match
• Medical, dental, and vision insurance coverage
• 100% paid 12-week maternity leave

• Serve as primary administrator of Microsoft Intune across a diverse device fleet including Windows 11 (physical and virtual), macOS, iOS, and Android
• Manage device configuration policies, compliance baselines, and endpoint protection across both commercial and GCC High (secured) environments
• Oversee application deployment, driver updates, and patching through Intune and Windows Update for Business
• Maintain device provisioning policies and procedures via Microsoft Autopilot, supporting the full device lifecycle from provisioning through retirement

• Manage device and group objects within Microsoft Entra
• Administer Group Policy for on-premises environments while participating in the ongoing transition to cloud-native Intune policies for cloud-joined endpoints

• Manage Patch
  
  MyPC for third-party application update deployment and quality assurance
• Administer Apple Business Manager to streamline iOS device provisioning in the corporate environment
• Maintain Printer Logic for cloud-based printer driver deployment and configuration management; collaborate with the Support team and vendors on escalated printer and copier issues

• Act as the escalation point for the wider IT Support team on complex endpoint issues, providing timely communication around troubleshooting steps, workarounds, and ongoing issue status

• Produce regular reporting on device compliance, patching metrics, end user experience, and inventory details using Microsoft Excel and Power BI
• Maintain accurate, up-to-date documentation for systems, processes, and troubleshooting procedures

• 2–5+ years of experience in endpoint administration and desktop support, with strong hands‑on expertise in enterprise Windows 11 environments (2000+ devices)
• Demonstrated experience administering Microsoft Intune, including device configuration, compliance policies, application deployment, and security baselines; proficiency managing identities, devices, and groups within Microsoft Entra
• Experience with Microsoft Power Shell to support remediations & application deployment for endpoints
• Experience managing mobile endpoints across iOS and Android platforms, as well as supporting macOS devices
• Working knowledge of Group Policy and traditional Active Directory environments; familiarity with the Microsoft 365 ecosystem, including Exchange Online, Teams, and One Drive
• Understanding of core networking fundamentals including DNS, DHCP, TCP/IP, and VPN; experience supporting and troubleshooting printer and copier environments
• Proven ability to act as a technical escalation point for end-user support teams, with strong troubleshooting and communication skills
• Ability to maintain clear documentation and effectively communicate technical information to both technical and non-technical audiences

EOE, including disability/vets