Endpoint Specialist

About Concert Properties

Putting people first is at the heart of the Concert Properties story. We are deeply invested in improving the lives of the people who live and work in our communities, acknowledging that communities are more than just buildings. We focus on quality, consistency and sustainability, and our business is driven by warm, passionate people who embody a desire to help each of us feel more connected to one another.

We develop, own and manage rental apartments; develop condominium homes; and develop, acquire and manage industrial and office properties. Since 1989, we’ve grown to over $6.6 billion in assets under control.

The Endpoint Specialist is a hands‑on technical role at the intersection of endpoint engineering and frontline support. This role owns the configuration, deployment, and lifecycle of corporate end‑user devices and workplace technology including desktops, laptops, mobile devices, printers, and meeting room technology within Concert’s Digital Experience (DEX) standards. Success in this role means shorter provisioning times, higher device compliance, standardized configurations, fewer repeat hardware/access issues, and a growing layer of automation that makes endpoint management scalable.

• Build and maintain device configuration profiles, compliance policies, conditional access integration, and update rings for Windows and iOS devices, plus baseline security hardening so every managed device meets Concert’s standards before an employee logs in.
• Package, test, and deploy end‑user applications so installs are current, compatible, and require no manual IT intervention.
• Monitor device compliance and Windows Update rings across the estate; investigate and remediate non‑compliant devices; report compliance metrics monthly to the DEX operational dashboard.

• Design and continuously improve automated device provisioning (deployment profiles, enrollment status pages, naming conventions) to minimize manual setup and reduce lead time.
• Manage the full device lifecycle — procurement coordination, configuration, refresh planning, warranty tracking, and secure decommissioning — and maintain an accurate device/peripheral inventory for audit and asset management.
• Administer mobile device enrollment, compliance, and App Protection Policies (MDM/MAM) to secure corporate data on managed devices while preserving a positive user experience.

• Own the end‑user application catalogue, including Microsoft 365 Apps update channels and license assignment, and govern new software requests for security, compatibility, and licensing.
• Administer printer and peripheral infrastructure across Concert offices, coordinating with vendors on service, firmware, and refresh cycles.
• Manage Concert’s meeting room and AV technology, including Microsoft Teams Rooms — conducting proactive health checks and supporting new room installations with facilities and vendors.

• Provide Level 2/3 support for endpoint‑related incidents and requests, resolving within SLA and documenting fully in Service Now.
• Partner with the Service Desk to build knowledge articles and escalation paths that improve first‑call resolution and reduce unnecessary escalations.
• Own technical device delivery for onboarding, offboarding, and role/location changes, and contribute endpoint metrics to monthly DEX reporting for Service Operations Review.

Please note this is a general description of the tasks and skills required. Additional responsibilities and duties may be required to successfully perform this role.

• Minimum 5 years of hands‑on endpoint management experience in an enterprise Microsoft environment.
• Degree in Computer Science, Systems Engineering, or equivalent experience.
• Proficiency with Active Directory and Entra .
• Strong experience with Microsoft 365 Online administration, including SharePoint, Teams, and One Drive.
• Advanced Power Shell scripting and automation skills.
• Strong written and verbal communication…