Senior Administrator, Systems Management

Role overview Lead the engineering and ongoing operations of an enterprise endpoint management platform spanning Windows physical and virtual devices. Combine deep Microsoft Endpoint Configuration Manager (MECM) and Intune expertise with security-first patching practices to keep a large device fleet compliant, reliable, and well-automated.

Responsibilities - Package, test, and deploy Windows and third-party applications through MECM and Intune (Win32), using PSADT-style silent installs with sound detection logic. - Configure and maintain co-management settings, including client settings, boundaries and boundary groups, deployment collections, Autopilot profiles, compliance policies, and configuration baselines. - Design, write, and maintain advanced PowerShell scripts for automation, remediation, reporting, and Intune/MECM operations. - Identify and remediate endpoint security vulnerabilities in partnership with Information Security, driving CVE triage and patch-compliance reporting for OS and third-party software. - Run the third-party patching lifecycle end to end (identification, packaging, testing, deployment) using tools like Patch My PC to shrink vulnerability exposure windows. - Apply networking fundamentals (DNS, DHCP, IP/subnetting, boundary/content distribution) to troubleshoot connectivity issues that affect client communication, application delivery, and patch distribution. - Use AI-assisted tools (e.g., coding assistants and scripting copilots) and orchestration to streamline packaging, remediation, and reporting; track work in JIRA and version scripts and configs in GitHub. - Partner with Architecture, Networking, Information Security, and Support teams; act as a technical escalation point for Level 1/2 endpoint engineers.

Requirements - Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent experience. - 8+ years of IT experience, including 5+ years in infrastructure or endpoint engineering. - Advanced, hands-on expertise with MECM/SCCM and Microsoft Intune, including co-management, Autopilot, compliance policies, and Win32 deployment. - Demonstrated experience remediating OS and third-party vulnerabilities, including CVE triage and patch-compliance reporting using Microsoft Defender or similar tooling. - Advanced PowerShell skills, including functions, modules, error handling, remoting, and Graph API/Intune scripting. - Working knowledge of Azure AD/Microsoft Entra ID, conditional access, Windows Autopatch, ServiceNow incident/request workflows, GitHub or Azure DevOps for version control, and JIRA for ticketing.

Nice to have - ITIL foundations or equivalent incident/problem/change management experience. - Experience mentoring Level 1/2 engineers and producing runbooks and KB documentation.