Endpoint Administrator II

Position Summary

The Endpoint Administrator II is responsible for the deployment, configuration, management, and security of endpoint devices across the CallTower organization. This role focuses on Microsoft Intune, Microsoft Entra, Microsoft Defender, Windows and macOS device management, and modern endpoint administration practices.

As a member of the Endpoint team, this individual will help manage the full device lifecycle, including provisioning, enrollment, compliance, application deployment, security configuration, patch management, and user support for corporate endpoints. The Endpoint Administrator II will also assist with endpoint security initiatives, automation, and continuous improvement of device management processes.

Position Responsibilities

• Configure, deploy, and manage Windows and macOS devices using Microsoft Intune.
• Administer Microsoft Entra ID, including group management, device identities, Conditional Access, and authentication-related services.
• Manage endpoint enrollment and provisioning processes, including Windows Autopilot and Apple device enrollment.
• Deploy, configure, and maintain device compliance policies, configuration profiles, and security baselines.
• Administer Microsoft Defender for Endpoint and participate in endpoint security initiatives.
• Manage mobile device and application management (MDM/MAM) policies for corporate and BYOD environments.
• Deploy and maintain software packages, updates, and operating system upgrades through Intune.
• Monitor endpoint health, compliance, inventory, and security status through management platforms and reporting solutions.
• Troubleshoot device management, enrollment, authentication, compliance, and application deployment issues.
• Create and maintain documentation for endpoint management processes, procedures, and standards.
• Participate in endpoint-related projects, migrations, upgrades, and technology rollouts.
• Collaborate with security, infrastructure, and support teams to ensure a secure and reliable endpoint experience.
• Maintain asset inventory accuracy and support device lifecycle processes including onboarding, refreshes, and offboarding.

Essential Skills and Experience

• Bachelor of Science in Information Technology or equivalent work experience. 
• 2+ years of experience in endpoint administration, endpoint engineering, or modern workplace management. 
• Microsoft Intune Administrator Associate (MD-102) or ability to earn. 
• Experience administering Microsoft Intune in a production environment. 
• Experience managing Microsoft Entra, including groups, device identities, authentication methods, and Conditional Access policies. Experience managing Windows 11 and macOS devices in an enterprise environment. 
• Experience with endpoint provisioning technologies such as Windows Autopilot and Apple Business Manager. 
• Experience configuring and managing MDM/MAM policies. 
• Experience with Microsoft Defender for Endpoint and endpoint security best practices. 
• Familiarity with compliance frameworks such as SOC 2, HIPAA, NIST, ISO 27001, or similar security programs. 
• Working knowledge of PowerShell scripting and Microsoft Graph automation. 
• Understanding of Zero Trust security principles and modern identity management practices. 
• Strong troubleshooting skills related to endpoint management, authentication, compliance, and device security. 
• Excellent written and verbal communication skills. 
• Strong documentation skills and attention to detail. 
• Proven ability to take ownership of assigned technologies and drive issues to resolution.

Benefits

• Annual market comp evaluation 
• 85% employer paid medical plans (HDHP and PPO options) 
• Dental/Vision 
• PTO accrual starts day one 
• 100% 401k match on first 4% 
• Paid Parental Leave 
• 100% Employer paid life insurance, LTD, EAP, telehealth, Gym Pass