Endpoint Systems Administrator

Most job postings are the same (and can be pretty boring, right?!). That's why we want to start out by telling you what's in it for you:

• We have an amazing platform that maximizes revenue for thousands of healthcare organizations across the country!
• We embrace diversity in a serious way! We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be.
• We celebrate and promote career growth and advancement.
• We have an awesome on-demand learning program.
• We do fun stuff like remote Cooking Classes, Yoga Sessions & Mixology Classes because we like to have fun!
• We have an awesome benefits package with Medical, Dental & Vision Coverage & 401K (with company match).
• We have an unlimited vacation policy - that's right, take vacation when you want and come back to work refreshed!
• We have cool Peer Nominated Awards & Recognition because we like to celebrate our employees!

The Endpoint Systems Administrator owns day-to-day endpoint management and device security for Windows (and other endpoints as applicable). This role administers Microsoft Intune and Windows Autopilot to deploy, configure, patch, and secure devices, and provides Tier 2 support for endpoint and access issues. The Endpoint Systems Administrator helps ensure devices are compliant, reliable, and ready for employees and contractors across the organization.

ESSENTIAL DUTIES AND RESPONSIBILITIES 

· Administer Microsoft Intune (enrollment, compliance, configuration profiles, apps, and endpoint security policies).

· Manage Windows Autopilot for standardized, zero-touch provisioning and refresh.

· Maintain device baselines: patching, security settings, disk encryption, and required software.

· Partner with Security to monitor and remediate endpoint risks (e.g., AV/EDR health, vulnerabilities, and compliance exceptions).

· Support identity and access tasks in Entra ID (users/groups, MFA, conditional access support, and device join/registration).

· Provide Tier 2 troubleshooting for endpoint, authentication, and Microsoft 365/SaaS access issues; escalate as needed.

· Own onboarding/offboarding device activities: device readiness, enrollment, and secure wipe/retire.

· Create and maintain documentation (runbooks, standards, and knowledge articles) and keep tickets up to date.

· Deliver consistent support for a remote-first workforce (approx. 130+ users) with a strong customer-service mindset.

QUALIFICATIONS

• 2+ years of experience supporting and managing end-user endpoints in a modern (cloud-first) environment.

• Hands-on experience with Microsoft Intune (device enrollment, compliance, configuration, and app deployment).

• Experience with Windows Autopilot and lifecycle management (provision, reset, retire).

• Working knowledge of Entra ID and modern authentication (SSO, MFA, conditional access).

• Strong troubleshooting skills across Windows, Microsoft 365, and common SaaS applications.

• Comfortable working independently, prioritizing work, and communicating clearly with end users.

• macOS support experience is a plus.

• Certifications are a plus (Microsoft, CompTIA, ITIL).

REQUIRED SKILLS 

• Intune administration: compliance, configuration, app deployment, and endpoint security.

• Windows endpoint troubleshooting (OS, drivers, updates, BitLocker, and performance).

• Autopilot provisioning and device lifecycle processes.

• Entra ID fundamentals and support for MFA/conditional access issues.

• Clear communication, strong ticket hygiene, and practical documentation skills.

• Security-first approach to endpoint operations and data handling.

EDUCATION AND EXPERIENCE:

· Bachelor’s degree in Computer Science (or equivalent experience).

· 2+ years of hands-on IT endpoint support/engineering experience.