Endpoint Administrator

The Senior Endpoint Infrastructure Consultant is responsible for designing, implementing, securing, and managing the systems that control our end-user devices (laptops, desktops, mobile devices, and virtual machines). They bridge the gap between IT security and infrastructure, focusing on ensuring devices are compliant, secure, and functional, particularly in modern hybrid or cloud-based environments.

Here is a detailed breakdown of the job description:
Key Responsibilities
Modern Device Management: Plan and execute the transition from legacy, on-premise systems (SCCM) to cloud-native, modern management solutions (Microsoft Intune).
Imaging and Provisioning: Design and manage automated, zero-touch device provisioning workflows using Windows Autopilot or similar technologies.
Security Policy Enforcement: Implement endpoint security configurations, including disk encryption (BitLocker), anti-malware/EDR, firewall rules, and compliance policies.
Patch Management: Create and maintain patching strategies for operating systems and third-party applications to mitigate vulnerabilities.
Application Deployment: Package, test, and distribute software to endpoints using automated tools.
Consulting and Design: Advise clients on best practices for endpoint architecture, Conduct workshops, and create technical documentation.
Troubleshooting: Provide Tier 2/3 support for complex, escalated, or non-recurring issues related to endpoint performance or connectivity.
Must Have Skills:
Experience: 5+ years of experience in IT consulting or enterprise IT environments.
Certifications (Preferred): Microsoft Certified: Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, or relevant security certifications (CISSP, CISM).
Microsoft Endpoint Manager: Deep, hands-on knowledge of Microsoft Intune, SCCM (MECM), and Windows Autopilot.
Operating Systems: Expert-level knowledge of Windows 10/11, as well as strong experience with iOS and macOS(JAMF). Deep technical experience with windows 10 to 11 upgrades.
Azure/Active Directory: Proficiency with Azure AD (Entra ID) and Active Directory Group Policies (GPOs).
Scripting: Ability to automate tasks using PowerShell.
Security Stack: Familiarity with various endpoint security solutions. (Crowdstrike, BeyondTrust PAM, Qualys, etc)
Consulting Experience: Proven ability to manage relationships, scope projects (SOW creation), and communicate technical concepts to non-technical stakeholders.
Education:
Education: Bachelor s degree in computer science, Information Technology, or equivalent experience.
Nice To Haves:
- Both Windows and MacOS experience
- Mid-size environments end-to-end experience
Core Objectives
To enable a secure and productive endpoint environment.
To ensure 100% compliance with security standards across all devices.
To automate, modernize, and stabilize the endpoint lifecycle.