Workplace Administrator

We're one of the world's leading practitioners of circularity, transforming materials from the animal agriculture and food industries into valuable ingredients. Ingredients that nourish people, feed animals and crops, and fuel the world with renewable energy.

This position is responsible for the day-to-day administration, operational support, maintenance, and security enforcement of enterprise endpoint devices and virtual desktop environments across a global, hybrid, cloud-first infrastructure. This role focuses on operational excellence, system availability, asset lifecycle management, and user-facing technical support escalation.

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.

• Executes daily device management tasks across the Workplace portfolio of services using technologies such as but not limited to Microsoft Intune, MECM/SCCM co-management, Azure Virtual Desktop (AVD), and Idira/Cyberark Privileged Access Management (PAM) / Endpoint Privilege Manager (EPM)
• Works closely with Service Desk teams, Infrastructure Engineers, and Information Security personnel, the administrator ensures consistent patch compliance, seamless software packaging and distribution, robust asset tracking, and rapid resolution of endpoint-related incidents
• Administers and maintains enterprise endpoint management platforms across Microsoft Intune, MECM/SCCM, and Entra  a co-managed configuration
• Monitors system health, enrollment status, and configuration policy compliance for Hybrid Entra d and cloud-native endpoints
• Maintains and troubleshoots Intune Configuration Profiles to maintain enterprise device standards
• Packages, tests, and deploys standard Win
  32, MSIX, and web applications using Patch My PC, Intune Management Extension and MECM
• Utilizes Power Shell scripts for administrative automation, software installation wrappers, and baseline remediation tasks
• Oversees application lifecycle updates, self-service software availability via Company Portal / Software Center, and third-party software catalog maintenance
• Performs operational administration of AVD host pools, session host health monitoring, and user session management
• Assists in updating session host gold images, managing FSLogix user profile storage containers, and troubleshooting virtual desktop connection or performance bottlenecks
• Process daily Idira/Cyberark Endpoint Privilege Manager (EPM) policy requests, elevation approvals, and policy exception reviews in accordance with zero-trust and least-privilege principles
• Supports Windows LAPS (Local Administrator Password Solution) implementation and password rotation tracking across domain and cloud environments
• Executes monthly Windows Update for Business (WUfB), Microsoft Autopatch, and third-party application patch distribution cycles across global endpoints
• Monitors Microsoft Defender for Endpoint alerts, Bit Locker encryption status, and Attack Surface Reduction (ASR) policy compliance; remediate non-compliant devices promptness
• Collaborates with Security and Audit teams to fulfill vulnerability remediation tasks and routine security compliance reporting
• Operates and supports Windows Autopilot deployment profiles and Enrollment Status Page (ESP) configurations for rapid global device staging and provisioning
• Manages dynamic device groups, monitor enrollment trends, and carry out structured asset onboarding, re-imaging, and offboarding recovery workflows
• Serves as a Tier-2/3 technical escalation point for Service Desk technicians regarding complex endpoint, virtual desktop, and deployment failures
• Adheres to IT Service Management (ITSM) processes for Incident, Change, and Request management in tools such as Service Now
• Documents technical resolution procedures, create knowledge base (KB) articles for Tier-1 support, and assist in maintaining standard operating procedures (SOPs)
• Other duties as assigned

• Bachelor's Degree in Information Systems, Computer Science, or equivalent practical work experience.
• 3+ years of hands-on endpoint administration and technical support experience in an enterprise environment using Microsoft Intune, MECM/SCCM, and Active Directory / Entra .
• Practical proficiency with Power Shell for routine administration, custom software packaging, and endpoint troubleshooting script execution.
• Operational experience administering Azure Virtual Desktop (AVD) or equivalent enterprise VDI…