We are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem for our HUD contract. IWe are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem. In this role, you will design, deploy, and maintain zero-touch device enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS devices. The ideal candidate has hands-on technical expertise in unified endpoint management (UEM), Apple Business Manager (ABM), Windows Autopilot, and cloud-first security baselines
This position will be located within the United States and is fully remote.
Responsibilities
- Multi-Platform Device Lifecycle Management
- Configure and maintain zero-touch onboarding for all platforms: Windows Autopilot, Apple Automated Device Enrollment (ADE) via Apple Business Manager (ABM), and iOS/iPadOS enrollment
- Manage macOS configuration profiles, mobile device management (MDM) payloads, and shell scripts (Bash) for custom settings and elevated controls
- Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and Remediation scripts
- Application Packaging & Deployment
- Package, test, and deploy applications across all platforms (Win32, LOB, Microsoft Store, macOS PKG/DMG files, and iOS App Store / VPP volume licensing)
- Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps
- Security & Compliance
- Implement Conditional Access policies, App Protection Policies (MAM), and Compliance Policies linked with Microsoft Defender for Endpoint
- Manage disk encryption standards across platforms (BitLocker for Windows, FileVault for macOS)
- Configure identity integrations, Single Sign-On (SSO), and Platform SSO for macOS endpoints
- Operational Support & Monitoring
- Act as Tier 3 escalation for endpoint-related technical issues across Windows, Mac, and mobile fleets
- Monitor tenant health, device compliance failures, sync errors, and security vulnerabilities; remediate non-compliant assets promptly
- Maintain accurate technical documentation, enrollment guides, and end-user self-service instructions
Qualifications
- Bachelor's with 12+ years of system administration experience (or commensurate experience)
- 3–5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Microsoft Intune / Endpoint Manager
- Hands-on experience integrating Apple Business Manager (ABM) with Intune, VPP app management, FileVault management, and running Bash scripts on macOS. JAMF knowledge preferred
- Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration
- Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines
- Experience configurating iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment
Clearance Required: Ability to maintain a HUD Public Trust clearance
Posted Salary Range
USD $108,310.00 - USD $145,000.00 /Yr.
Bachelor's with 12+ years system administration experience; 3-5+ years enterprise endpoint management with 2+ years Microsoft Intune; experience with ABM, Windows Autopilot, PowerShell, Entra ID; ability to maintain HUD Public Trust clearance.
Key Responsibilities
- managing device lifecycle
- packaging applications
- implementing security policies
Skills & Tools
Microsoft Intune, Microsoft Endpoint Manager, Apple Business Manager, Windows Autopilot, PowerShell, Microsoft Entra ID, Microsoft Defender for Endpoint, Bash, JAMF, IntuneWin App Prep Tool
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — United States
- Salary: USD 108,310 – 145,000 / year
- Languages: English
About GovCIO
An IT services company providing technology solutions and support. — Industry: Information Technology