Desktop Administrator

ABOUT YOU

Are you the go-to problem solver when technology doesn’t cooperate? Do you thrive in a fast-paced environment where no two days are the same? Do you enjoy troubleshooting issues, optimizing systems, and creating a seamless experience for end users? If the answer is “Yes!” then we have an exciting opportunity for you. We are ARCO, a Family of Construction Companies.

We are seeking a proactive and service-oriented Desktop Administrator to support and enhance our Windows-based and cloud-connected environment. In this role, you will be responsible for managing end-user devices, supporting identity and access through Azure Active Directory, and ensuring devices remain secure and compliant using tools like Microsoft Intune.

We are dedicated to the well‑being of our associates and are proud to be consistently recognized as a Best Place to Work. Our compensation and benefits package not only supports our associates and their families but benefits local communities and communities around the world.

• Industry‑leading performance‑based bonus program
• Employee Stock Ownership Plan (ESOP)
• Traditional and Roth 401k
• Tuition reimbursement for associates
• Scholarship for associates’ children up to $28,000 per child
• 1‑month paid sabbatical after every five years of employment, plus $5,000 for travel
• 1‑week paid volunteer leave each year
• 100% charitable match
• Medical, dental, and vision insurance coverage
• 100% paid 12‑week maternity leave

• Serve as primary administrator of Microsoft Intune across a diverse device fleet including Windows 11 (physical and virtual), macOS, iOS, and Android
• Manage device configuration policies, compliance baselines, and endpoint protection across both commercial and GCC High (secured) environments
• Oversee application deployment, driver updates, and patching through Intune and Windows Update for Business
• Maintain device provisioning policies and procedures via Microsoft Autopilot, supporting the full device lifecycle from provisioning through retirement

• Manage device and group objects within Microsoft Entra 
• Administer Group Policy for on‑premises environments while participating in the ongoing transition to cloud‑native Intune policies for cloud‑joined endpoints

• Manage Patch
  
  MyPC for third‑party application update deployment and quality assurance
• Administer Apple Business Manager to streamline iOS device provisioning in the corporate environment
• Maintain Printer Logic for cloud‑based printer driver deployment and configuration management; collaborate with the Support team and vendors on escalated printer and copier issues

• Act as the escalation point for the wider IT Support team on complex endpoint issues, providing timely communication around troubleshooting steps, work‑arounds, and ongoing issue status

• Produce regular reporting on device compliance, patching metrics, end user experience, and inventory details using Microsoft Excel and Power BI
• Maintain accurate, up‑to‑date documentation for systems, processes, and troubleshooting procedures

• 2–5+ years of experience in endpoint administration and desktop support, with strong hands‑on expertise in enterprise Windows 11 environments (2000+ devices)
• Demonstrated experience administering Microsoft Intune, including device configuration, compliance policies, application deployment, and security baselines; proficiency managing identities, devices, and groups within Microsoft Entra 
• Experience with Microsoft Power Shell to support remediations & application deployment for endpoints
• Experience managing mobile endpoints across iOS and Android platforms, as well as supporting macOS devices
• Working knowledge of Group Policy and traditional Active Directory environments; familiarity with the Microsoft 365 ecosystem, including Exchange Online, Teams, and One Drive
• Understanding of core networking fundamentals including DNS, DHCP, TCP/IP, and VPN; experience supporting and troubleshooting printer and copier environments
• Proven ability to act as a…