IT Endpoint Analyst

Arraya Solutions, a leading technology consulting firm, is looking for an IT Endpoint Analyst to join our customer’s team.

We embrace change, value family, and stay actively involved in our community. Our team is made up of people with positive attitudes who are committed to learning, collaborating, and delivering excellent service—supported by leaders who stay engaged in the day-to-day.

As an IT Endpoint Analyst, you will help lead the implementation, support, and continuous improvement of the organization’s endpoint environment—desktops, laptops, mobile devices, peripherals, and (as applicable) virtual desktops. You will partner with Infrastructure, Security, and Service Desk teams to deliver secure, reliable, and standardized endpoint services across the device lifecycle (build, deploy, manage, patch, and retire), while improving automation, compliance, and end-user experience.

WHAT YOU’LL DO:

The statements below describe the general nature and level of work performed by people assigned to this job. They are not intended to be an exhaustive list of responsibilities, duties, and skills. Other duties may be assigned.

·       Endpoint Strategy & Delivery: Translate business needs into technical requirements for endpoint initiatives (standards, upgrades, cost-saving programs, and lifecycle roadmaps) aligned to enterprise objectives.

·       Deployment & Implementation: Lead or support testing, packaging, deployment, and rollout of endpoint solutions and updates while minimizing business disruption and adhering to change controls.

·       Innovation & Continuous Improvement: Identify opportunities to improve the endpoint experience through automation, self-service, and better tooling; recommend enhancements that reduce manual effort and increase reliability.

·       Asset Lifecycle Management: Manage endpoint hardware/software lifecycle (provisioning, configuration, maintenance, and retirement). Ensure asset adds/changes/disposals are accurately recorded in the CMDB to maintain compliance and visibility.

·       Collaboration & Support: Partner with Architecture, Infrastructure, Applications, and Security teams to prepare associates for new deployments and maintain consistent endpoint security posture.

·       Escalation & Troubleshooting: Act as an escalation point for complex endpoint incidents; perform root-cause analysis and implement corrective/preventive actions to reduce repeat issues.

·       Training & Field Support: Provide onsite and virtual support for deployments and incident resolution; contribute to end-user communications, job aids, and adoption readiness.

·       Standardization & Automation: Simplify, standardize, and automate endpoint management processes (builds, patching, compliance, software delivery) to improve scalability.

·       Technology Awareness: Stay current on endpoint/MDM/EDR trends and best practices to anticipate needs and recommend emerging solutions.

·       Governance & Compliance: Follow all company policies, safety regulations, and procedures while supporting the organization’s programs, goals, and initiatives.

WHAT WE’RE SEEKING:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals to perform the essential functions.

·       Endpoint Platforms: Hands-on administration and support of Windows 10/11 endpoints plus macOS and mobile (iOS/iPadOS/Android) in an enterprise environment (laptops, desktops, tablets, rugged devices, and peripherals).

·       Endpoint Management / UEM (Intune, SCCM, SOTI): Strong hands-on experience administering Microsoft Intune (Endpoint Manager) and Microsoft Configuration Manager (SCCM/MECM) for endpoint configuration, compliance, inventory, software delivery, and reporting; plus experience managing mobile/rugged fleets using SOTI MobiControl.

·       Rugged/Mobile Device Management (SOTI): Experience enrolling and managing Android (and other supported) devices in SOTI MobiControl, including profiles/policies, app distribution, remote support, device restrictions/kiosk modes, and troubleshooting enrollment/compliance issues.

·       OS Deployment & Provisioning: Experience building and maintaining standardized Windows deployment workflows using Windows Autopilot (cloud provisioning) and SCCM Task Sequences (on-prem imaging), including driver management, BIOS/UEFI configuration, post-build baselines, and validation.

·       Patch & Vulnerability Management: Experience managing Windows patching via Windows Update for Business and Intune update rings, and/or SCCM Software Updates (ADR/maintenance windows), with a track record of driving patch compliance and supporting vulnerability remediation in partnership with Security.

·       Endpoint Security: Working knowledge of endpoint hardening and security controls (BitLocker/FileVault, local admin controls/privileged elevation, device compliance, firewall, USB/storage restrictions, and baseline configuration standards such as CIS benchmarks).

·       Identity & Access: Experience with Active Directory and Entra ID (Azure AD) concepts including device join (Hybrid/Azure AD join), group-based targeting, conditional access dependencies, and certificate-based access where applicable.

·       EDR/AV Tooling: Familiarity with endpoint protection and EDR tools (e.g., Microsoft Defender for Endpoint or comparable) and basic triage workflows in coordination with Security Operations.

·       Application Packaging & Software Distribution: Understanding of software packaging and deployment using Intune (Win32 apps, MSI/MSIX, supersedence/detection rules) and SCCM (Applications/Packages, content distribution, collections), including common enterprise apps (Microsoft 365 Apps, Adobe, Java, browsers).

·       Automation & Scripting: Ability to automate endpoint tasks using PowerShell (required) and familiarity with scripting fundamentals (batch, Bash, or Python a plus); comfort using version control practices for scripts/configs (Git a plus).

·       Remote Support & Troubleshooting: Hands-on use of remote support tools (screen sharing/remote control) plus strong troubleshooting skills across OS, drivers, networking, printing, VPN, and peripheral integration.

·       Virtual Desktop Awareness: Exposure to VDI/virtual desktops (e.g., VMware Horizon, Citrix, or Azure Virtual Desktop) and the endpoint considerations for delivering virtual workspaces (nice to have).

·       ITSM & Documentation: Experience working in an ITSM toolset (ServiceNow, Jira Service Management, or equivalent), following incident/problem/change processes, and producing clear technical documentation/knowledge articles.

·       Analytical & Problem-Solving: Self-directed critical thinker with strong troubleshooting and root-cause analysis skills; able to manage multiple priorities while maintaining composure under pressure.

·       Collaboration & Communication: Communicates technical concepts clearly (verbal and written) to technical and non-technical audiences; works effectively across Infrastructure, Applications, and Security.

·       Adaptability: Flexible and responsive to evolving business needs; willing to work additional hours or travel as required to support operational continuity.

OTHER SKILLS THAT MAKE YOU STAND OUT:

·       Enterprise endpoint projects: Experience supporting large-scale rollouts (hardware refreshes, Windows 11 migrations, Autopilot/Intune adoption, or standard image modernization).

·       Security-minded operations: Familiarity with Zero Trust endpoint concepts, least-privilege models, and partnering with Security on compliance and risk reduction.

·       Metrics & reporting: Comfort tracking endpoint KPIs (patch compliance, device health, ticket trends) and using data to prioritize improvements.

·       Process improvement: Demonstrated ability to streamline workflows and reduce repeat incidents through documentation, automation, and standardization.

·       Travel flexibility: Willingness to travel as needed for onsite deployments and support.