System Administrator – Endpoint & Client Technologies

Responsibilities

We are seeking a mid‑level System Administrator to own the management, security, and reliability of our end‑user computing environment, with a primary focus on Microsoft Intune and modern client technologies. This is a hands‑on role responsible for the full device lifecycle — provisioning, configuration, patching, application delivery, and compliance — across a Microsoft‑centric estate. The ideal candidate pairs deep endpoint management expertise with solid working knowledge of the underlying infrastructure (identity, networking, servers, and cloud) so they can troubleshoot end to end and partner effectively with infrastructure, security, and service desk teams.

• Microsoft Intune administration — manage device enrollment, configuration profiles, compliance policies, and Conditional Access integration across Windows, iOS, and macOS.
• Modern provisioning — build and maintain Windows Autopilot deployment, zero‑touch provisioning, and standardized device baselines.
• Application packaging & delivery — package, deploy, and update applications via Intune (Win
  32, MSI, Microsoft Store), and manage app protection policies.
• Patch & update management — operate Windows Update for Business / Autopatch rings, monitor compliance, and remediate failures.
• Endpoint security posture — configure and maintain Microsoft Defender for Endpoint, Bit Locker, attack‑surface‑reduction, and security baselines in partnership with the security team.

• Identity & access — administer Microsoft Entra  (Azure AD) — users, groups, dynamic groups, device identity, and hybrid join; support SSO and MFA.
• Microsoft 365 — support and administer M365 services (Exchange Online, Teams, SharePoint/One Drive) as they relate to the client experience.
• Infrastructure support — apply working knowledge of Active Directory, Group Policy, DNS/DHCP, Windows Server, networking fundamentals, and Azure to troubleshoot issues end to end.
• Automation — use Power Shell (and Graph API where applicable) to automate routine administration, reporting, and remediation.

• Enterprise AI client administration — deploy, configure, and manage AI desktop clients such as Claude (Cowork), ChatGPT Desktop, and Google Gemini at an enterprise level, including packaged deployment through Intune.
• Configuration & governance — configure enterprise tenant settings, authentication (SSO/SCIM), data controls, and admin policies to align with company security and AI governance standards.
• Extending the platforms — set up and support tools, plugins, skills, connectors/MCPs, and projects/work spaces that extend AI client capabilities for business teams.
• Enablement & support — act as a technical resource for safe, productive adoption of AI desktop tools, troubleshoot client issues, and document standard configurations and guardrails.

• Escalation support — act as Tier 2/3 escalation for endpoint and client technology issues from the service desk.
• Documentation & standards — maintain runbooks, configuration standards, and knowledge‑base articles; contribute to a well‑governed, standardized environment.
• Reliability & monitoring — monitor device health, compliance, and reporting; proactively identify and resolve recurring problems.
• Cross‑team collaboration — partner with infrastructure, cybersecurity, and enterprise applications teams on projects and rollouts.

The anticipated base salary range for this position is listed below. In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives and a comprehensive benefits package.

Anticipated base salary range: $130,000 - $150,000 per year.

Actual base salary within the anticipated range will be determined by several components including, but not limited to, the individual's experience, skills, qualifications, and market factors.

• 8+ years of experience in system administration, endpoint management, or desktop engineering.
• Demonstrated hands‑on experience administering Microsoft Intune / Endpoint Manager in a production environment.
• Strong experience with Windows 10/11 client management, Windows…