Senior IT System Analyst

A Brief Overview

The Senior IT Systems Analyst is responsible for the day-to-day administration, support, and maintenance of Hunt's Microsoft 365 environment, with primary focus on Microsoft Intune (endpoint management) and Microsoft Entra  (identity and access management). Working under the direction of the Service Desk Director, this hands‑on technical role supports the configuration, operation, and continuous improvement of device management, identity management, and access control solutions across the organization.

The role serves as an escalation point for complex Tier 2 and Tier 3 support issues received from the outsourced Tier 1 service desk and internal users. In addition to troubleshooting and resolving technical issues, the Senior IT Systems Analyst contributes to service effectiveness by documenting processes, developing knowledge base content, identifying recurring issues, and implementing practical improvements that enhance support efficiency and reduce repeat incidents.

• Microsoft Intune / Endpoint Management:
• Administers and supports Intune across Windows, iOS/iPadOS, Android, and macOS: enrollment, compliance policies, configuration profiles, and device lifecycle.
• Supports the administration and maintenance of Windows Autopilot — profile design, Enrollment Status Page, ESP/hash management, and coordination with the hardware supplier and imaging process.
• Packages, deploys, and maintains applications (Win
  32/.intunewin, LOB, Microsoft Store, Company Portal), including detection rules, dependencies, and supersedence.
• Administers Windows Update for Business / Autopatch rings, driver and firmware update policies, and feature update deferrals; reports on device compliance and patch status.
• Implements and maintains security baselines, Defender for Endpoint policy, Bit Locker/File Vault encryption policies, and Local Administrator Password Solution (LAPS).
• Supports the administration of app protection (MAM) policies for corporate data on unmanaged and BYOD devices.
• Assists with endpoint management initiatives, including support for technology migrations and device management improvements.
• Troubleshoots enrollment, configuration, compliance, and synchronization issues and documents resolutions.
• Microsoft Entra  / Identity & Access:
• Administers Entra , groups, dynamic group rules, administrative units, and license assignment via group-based licensing.
• Supports the implementation, testing, and maintenance of Conditional Access policies; uses report-only mode and What If analysis before enforcement, and documents exclusions with an owner and review date.
• Administers authentication methods and MFA rollout, passwordless/Windows Hello for Business, Temporary Access Pass, and self-service password reset.
• Supports enterprise application SSO (SAML/OIDC), app registrations, service principals, API permissions, and SCIM provisioning for third-party SaaS.
• Assists with privileged access administration and access review activities in alignment with established security policies and procedures.
• Supports identity lifecycle automation for joiner/mover/leaver processes in coordination with HR systems.
• Reviews sign-in and audit logs to assist with troubleshooting access-related issues and account investigations.
• Provides administration and support for Microsoft 365 services, including Exchange Online, SharePoint Online, One Drive, and Teams.
• Monitors Microsoft 365 service health and communicates relevant service disruptions and updates to stakeholders.
• Maintains software licensing data and assists with license assignment reviews and reporting activities.
• Assists with data protection controls in scope for the role: retention policies, sensitivity labels, and DLP policies, in coordination with Security and Legal.
• Maintains tenant configuration documentation, change records, and a current architecture/runbook set.
• Serves as the escalation point for Intune, Entra, and Microsoft 365 issues raised by the outsourced Tier 1 provider and internal Tier 2 staff.
• Investigates and resolves escalated incidents within agreed service levels. Documents findings with clear written root cause and resolution notes in the…