Endpoint Platform Administrator

It's fun to work in a company where people truly BELIEVE in what they're doing!

Fullsteam is a leading provider of vertical software and embedded payments technology dedicated to helping businesses flourish by providing their customers with seamless experiences. With a dynamic and growing team of 1,700 employees, we are committed to driving innovation and delivering best-in-class software and payment solutions that empower small and medium-sized businesses across numerous industries. Our purpose is to help our customers grow their businesses and delight their customers. Join us and be a part of a forward-thinking company that values growth, excellence, and the success of our clients.

As a Platform Administrator for the Endpoint Engineering team, you will play a critical role in managing, securing, and optimizing our fleet of endpoints, including Windows, Mac, and iOS. This will be done in collaboration closely with Enterprise IT teams, managed service providers, key stakeholders, and third-party partners. Your efforts will also extend to enhancing device security, user experience, and compliance across the M365 environment. This role requires experience in macOS management, Apple Business Manager, Azure Active Directory, and Intune, and a proactive approach to process optimization and implementation.

Primary Responsibilities:

• Mac Endpoint Configuration and Management: Lead the configuration, deployment, and ongoing management of Mac and iOS endpoints (physical and virtual), ensuring consistency, security, and compliance with organizational policies.

• Windows Device Support: Provide configuration and basic support for Windows endpoints, ensuring alignment with organizational policies and security guidelines.

• Integration with M365 Tools: Oversee the integration of Mac, iOS, and Windows devices with Microsoft Endpoint Manager (MEM), Intune, Azure Active Directory (AAD), and key M365 applications like Outlook, Teams, and OneDrive.

• Apple MDM Management: Implement and maintain the Apple MDM solution (e.g. Jamf, Mosyle), focusing on seamless management, app deployment, compliance checks, and reporting for Apple devices.

• Apple Business Manager & Third-Party Engagement: Lead the administration of Apple Business Manager (ABM), including provisioning and supervision of devices. Collaborate with third-party partners on key deployments.

• Endpoint Security and Compliance: Deploy endpoint security solutions and implement compliance measures to protect against security threats and enforce regulatory requirements.

• Patch Management and Software Updates: Establish and execute patch management strategies for all endpoints, ensuring devices are consistently updated with security patches and software updates with minimal disruption.

• Application Packaging and Deployment: Design, package, and deploy software applications and updates for Mac and Windows endpoints, leveraging MDM solutions for consistency and reliability.

• BU Migration Support: Assist in the integration and migration of acquired Business Units' (BU) devices into the central management infrastructure, ensuring adherence to company standards.

• Documentation and Knowledge Sharing: Create and maintain documentation related to Mac, iOS, and Windows endpoint configurations, policies, procedures, and troubleshooting guides. Conduct knowledge-sharing sessions with managed service providers and internal IT teams.

• Continuous Improvement and Best Practices: Stay up to date on industry trends and best practices related to macOS management, MDM solutions, security, and Windows support. Actively identify and implement process improvements.

Skills & Competencies:

• Technical Experience managing Mac and iOS devices using an MDM.

• Strong aptitude for problem solving to resolve endpoint related issues efficiently establishing future best practices.

• Excellent communication skills both verbal and written to manage relationships internally and externally to drive service quality.

• Knowledgeable in Endpoint Security including compliance data and protection awareness.

• Ability to meet deadlines, prioritizing tasks effectively in a fast-paced environment.

Primary Qualifications:

• Bachelor’s degree in Computer Science, Information Technology or a related field, may substitute for work experience.

• 3+ years of experience in endpoint management in both Mac and Windows.

• Experience integrating between endpoints and M365 tools like MEM, AAD, Teams, and Outlook.

• Experience working with virtual desktop environments (AVD, CloudPC, Virtual Macs, etc.)

• Understanding of macOS, iOS, and Windows security protocols and best practices for compliance and data protection.

• Demonstrated ability to collaborate effectively with third-party implementation partners.

• Experience in developing patch management strategies and deploying software updates.

• Familiarity with Apple Business Manager and its features for device provisioning and deployment.

• Strong documentation skills to maintain clear technical processes and guides.

Preferred Skills/Experience:

• Proficiency in managing macOS and iOS environments using Mosyle or Jamf MDM, including app deployment, compliance enforcement, and device configuration.

• Experience integrating macOS, iOS, and Windows endpoints with M365 tools and solutions like MEM and AAD.

• Experience with MacStadium.

• In-depth knowledge of Apple Business Manager (ABM) for device provisioning and supervision, ensuring alignment with corporate policies.

• Expertise in packaging and deploying applications efficiently for both Mac and Windows endpoints.

• Skilled in implementing and managing Single Sign-On (SSO) solutions for endpoint environments.

• Demonstrated ability to engage effectively with third-party implementation partners for project success.

• Knowledge of endpoint security protocols and best practices to safeguard devices from threats and vulnerabilities.

• Strong skills in developing and executing patch management strategies, with minimal disruption to end users.

• Skilled in supporting business integration and migration efforts.

Fullsteam supports an inclusive workplace that values diversity of thought, experience, and background. Fullsteam is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state, or local law.