System Administrator – Endpoint & Client Technologies

Responsibilities

• Endpoint & Client Management — Microsoft Intune administration: manage device enrollment, configuration profiles, compliance policies, and Conditional Access integration across Windows, iOS, and macOS.
• Modern provisioning — build and maintain Windows Autopilot deployment, zero-touch provisioning, and standardized device baselines.
• Application packaging & delivery — package, deploy, and update applications via Intune (Win
  32, MSI, Microsoft Store), and manage app protection policies.
• Patch & update management — operate Windows Update for Business / Autopatch rings, monitor compliance, and remediate failures.
• Endpoint security posture — configure and maintain Microsoft Defender for Endpoint, Bit Locker, attack-surface-reduction, and security baselines in partnership with the security team.

• Identity & access — administer Microsoft Entra  (Azure AD) — users, groups, dynamic groups, device identity, and hybrid join; support SSO and MFA.
• Microsoft 365 — support and administer M365 services (Exchange Online, Teams, SharePoint/One Drive) as they relate to the client experience.
• Infrastructure support — apply working knowledge of Active Directory, Group Policy, DNS/DHCP, Windows Server, networking fundamentals, and Azure to troubleshoot issues end to end.
• Automation — use Power Shell and Graph API to automate routine administration, reporting, and remediation.

• Enterprise AI client administration — deploy, configure, and manage AI desktop clients such as Claude (Cowork), ChatGPT Desktop, and Google Gemini at an enterprise level, including packaged deployment through Intune.
• Configuration & governance — configure enterprise tenant settings, authentication (SSO/SCIM), data controls, and admin policies to align with company security and AI governance standards.
• Extending the platforms — set up and support tools, plugins, skills, connectors/MCPs, and projects/work spaces that extend AI client capabilities for business teams.
• Enablement & support — act as a technical resource for safe, productive adoption of AI desktop tools, troubleshoot client issues, and document standard configurations and guardrails.

• Escalation support — act as Tier 2/3 escalation for endpoint and client technology issues from the service desk.
• Documentation & standards — maintain runbooks, configuration standards, and knowledge-base articles; contribute to a well-governed, standardized environment.
• Reliability & monitoring — monitor device health, compliance, and reporting; proactively identify and resolve recurring problems.
• Cross-team collaboration — partner with infrastructure, cybersecurity, and enterprise applications teams on projects and rollouts.

Anticipated base salary range: $130,000 - $150,000 per year. In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives and a comprehensive benefits package. Actual base salary within the anticipated range will be determined by experience, skills, qualifications, and market factors.

• 8+ years of experience in system administration, endpoint management, or desktop engineering.
• Hands-on experience administering Microsoft Intune / Endpoint Manager in a production environment.
• Strong experience with Windows 10/11 client management, Windows Autopilot, and application packaging/deployment.
• Working knowledge of Microsoft Entra  (Azure AD), Conditional Access, and Microsoft 365 administration.
• Foundational knowledge of Active Directory, Group Policy, DNS/DHCP, Windows Server, and core networking concepts.
• Proficiency with Power Shell scripting for automation and reporting.
• Experience with endpoint security tooling (e.g., Microsoft Defender for Endpoint, Bit Locker).
• Strong troubleshooting skills and ability to work independently in a fast-paced environment.
• Familiarity with AI desktop clients such as Claude (Cowork), ChatGPT Desktop, and Google Gemini, including enterprise-level configuration, deployment, and management of tools, plugins, skills, connectors, and projects/work spaces.
• Excellent communication skills and a…