Desktop Administrator

Position Summary

The Desktop Administrator deploys, maintains, supports, and troubleshoots all desktops, peripherals, and end‑user services across the organization. The role supports endpoint lifecycle management (Windows PCs and other related devices), application packaging and updates, security hardening, and remote support—leveraging modern RMM tools and Microsoft Intune to ensure secure, reliable, and consistent user experiences.

Works with other IT staff and provides guidance to the Service Desk and other IT staff on endpoint standards and procedures. Works collaboratively with the Networking and Systems Administrator roles.

• Works with the System Administrator in administering Intune/Endpoint Manager.
• Tenant hygiene, device enrollment (including Windows Autopilot), configuration profiles, compliance policies, conditional access coordination with the identity team, Bit Locker, and Defender for Endpoint baselines.
• Package, deploy, and update applications (MSI/MSIX/.intunewin), including line‑of‑business apps; manage Win Get repositories where appropriate.
• Maintain device compliance posture, remediate drifts, and report on policy adherence.

• Participates in administering the organization’s Remote Monitoring & Management (RMM) platform(s): agent health, policy configuration, alerting thresholds, script libraries, remote support sessions, patch automation, and asset inventory.
• Build and maintain automation (Power Shell preferred) to standardize builds, reduce manual tasks, and improve reliability across endpoints.

• Drive endpoint OS and application patching schedules; coordinate change windows to minimize user impact.
• Enforce endpoint hardening standards (CIS/Microsoft baselines), secure local admin rights, manage device encryption, and collaborate on MDR/EDR integrations.
• Support healthcare‑grade privacy and security practices (e.g., HIPAA/PHI handling) and incident response playbooks in coordination with Info Sec.

• Serve as Tier 2/3 escalation for endpoint issues, VIP support, and remote assistance; ensure timely resolution and clear communication.
• Participates in Service Desk to refine ticket categories, SLAs, and knowledge articles; contribute to self‑service content and training.
• Work collaboratively across departments (clinical, operations, HR, finance, air/ground operations) to understand workflows and deliver reliable user services.

• Support identity and endpoint integrations (Entra /Azure AD, and/or Okta), MFA, and device compliance gates for M365 apps.
• Troubleshoot Microsoft 365 desktop apps (Teams, Outlook, One Drive) and device sign‑in issues; coordinate with network/telecom teams for connectivity dependencies.

• Maintain standard operating procedures, build images/runbooks, “golden” configuration baselines, and endpoint support playbooks.
• Track hardware/software assets, warranty/RMA, and license consumption; support annual audits and true‑ups.

• Analyze endpoint telemetry and ticket trends to recommend optimizations; pilot new tools, features, and policies; assist with migrations (e.g., SCCM→Intune).
• Participate in after‑hours maintenance windows and on‑call rotations as required.

• Full‑time position with core business hours; occasional after‑hours maintenance windows and participation in on‑call rotations as required.

• Periodic overtime may be required to support system maintenance, upgrades, incident response, or business‑critical initiatives.

• Based in Irving, TX, with support coverage for regional sites as needed to fulfill endpoint lifecycle management and user support responsibilities.
• Primarily office‑based with extended periods of computer and console work (Intune, RMM, ticketing systems, scripting environments).
• Regular interaction with production systems supporting healthcare, aviation, and operational teams where downtime or misconfiguration may directly affect patient care or mission‑critical services.
• Periodic work in technical spaces…