Sr. Microsoft 365 & Endpoint Administrator

The Microsoft 365 & Endpoint Administrator administers, secures, supports, and continuously improves Omni Hotels & Resorts' Microsoft 365, Microsoft Intune, Active Directory (AD), and Group Policy environments. This in-office, hands-on role works closely with Infrastructure and IT Security to manage cloud collaboration services, endpoint configuration and compliance, application deployment, and identity-related administration across corporate offices, hotels, resorts, and remote associates. It serves as an escalation resource for IT Support Services and property IT teams and provides day-to-day oversight of one Microsoft 365 Administrator.

• Administer Exchange Online, Microsoft Teams, SharePoint Online, One Drive for Business, Microsoft 365 Apps, and related tenant settings.
• Manage users, groups, licenses, service configurations, and delegated administrative roles.
• Monitor service health and troubleshoot authentication, licensing, mailbox, collaboration, and application issues.

• Administer Microsoft Intune for Omni-managed Windows, macOS, iOS, and Android devices.
• Maintain enrollment, configuration, compliance, security, update, and device restriction policies.
• Administer Windows Autopilot and standardized provisioning, reassignment, reset, retirement, and decommissioning processes.
• Package, test, deploy, update, and retire applications through Intune and Company Portal.
• Monitor device health, compliance, deployment results, unsupported operating systems, and stale device records.

• Administer AD user, group, and computer objects, organizational units (OUs), group membership, and delegated permissions within approved access boundaries; coordinate routine account lifecycle fulfillment with the IT Service Desk.
• Troubleshoot domain authentication, account lockouts, domain-join, and hybrid identity synchronization issues in partnership with Infrastructure and Information Security.
• Create, configure, test, deploy, and maintain Group Policy Objects (GPOs), including links, scope, security filtering, inheritance, and approved user and computer settings.
• Investigate Group Policy processing failures and conflicting settings; maintain policy documentation, backups, and rollback plans through established change control.
• Review stale AD objects and outdated or duplicate GPOs; coordinate approved cleanup and migration of applicable settings to Intune while preventing conflicting policy enforcement.

• Support Microsoft Entra , MFA, Conditional Access, security groups, device registration, and device-based access requirements within assigned responsibilities.
• Apply least-privilege, role-based access, separation-of-duties, and documented change-control practices.
• Partner with Information Security to remediate endpoint vulnerabilities and implement approved Microsoft 365 and endpoint security controls.

• Serve as a technical escalation point for the Omni Service Desk, property IT teams, and other support resources.
• Support a geographically distributed, 24x7 hospitality environment where technology availability may directly affect hotel operations, associate productivity, and guest service.
• Work closely with Infrastructure and IT Security to coordinate deployments, troubleshoot cross-platform issues, and implement approved changes with minimal disruption across corporate offices, hotels, and resorts.
• Create knowledge articles, support procedures, configuration standards, and technical documentation.
• Participate in Omni incident, problem, change, request, and major-incident management processes.
• Provide scheduled on-call or after-hours…