System Administrator - Intune

CoFoMo Inc.; Montreal (administrative region); Hybrid; CAD 70,000 - 100,000; Full time

Job summary

CoFoMo Inc. in Montreal, QC seeks an experienced IT Infrastructure Administrator to manage a Microsoft Intune fleet and hybrid AD/Entra ID environments. You will automate deployments, secure workstations, and coordinate Windows updates across a mixed PC/macOS fleet.

This role emphasizes automation, documentation and incident resolution. The ideal candidate has deep Windows platform knowledge, strong scripting skills and a proactive approach to security and compliance in a Microsoft-centric

Qualifications

• Hold a degree in computer science, information technology, cybersecurity or a related field.
• Have relevant experience in systems administration in a Microsoft environment.
• Master Microsoft Intune (Endpoint Manager) and the administration of a fleet of workstations.
• Demonstrate experience in automating the deployment and configuration of Windows desktops.
• Be familiar with Windows Autopilot and modern desktop management practices.
• Use PowerShell for IT administration and automation.
• Experience in automated deployment of applications, configurations, and security patches.
• Understand Microsoft Active Directory, GPOs, and Microsoft Entra ID.
• Be proficient in Microsoft 365 components (Exchange Online, SharePoint Online, Teams, OneDrive).
• Develop understanding of Windows and Windows Server environments.
• Have experience in cybersecurity, securing Microsoft environments and workstations.
• Apply identity and access management principles.
• Resolve level 2 and 3 incidents efficiently.
• Demonstrate automation, standardization and continuous improvement mindset.

Responsibilities

• Administer and evolve the Microsoft Intune environment (Endpoint Manager).
• Centrally manage Windows desktop and mobile devices.
• Define, deploy and maintain device configuration profiles and security policies.
• Automate desktop provisioning and configuration using Windows Autopilot.
• Standardize deployment of applications and installation packages.
• Plan and supervise Windows updates, patches and workstation upgrades.
• Develop PowerShell scripts to automate admin tasks.
• Implement detection and auto-correction of non-compliant configurations.
• Support security and compliance across workstations and cloud services.
• Analyze deployment and configuration issues and apply patches.
• Document configurations, policies, apps and processes for knowledge sharing.
• Collaborate with external vendors when required.
• Contribute to identity and access management with least privilege.
• Support endpoint protection deployments and incident response.

Skills

Intune (Endpoint Manager)

PowerShell scripting

Automation & deployment

Windows desktop & server mgmt

Identity & access mgmt

Hybrid AD & Entra ID

Security & compliance

Education

Bachelor's degree in CS/IT or related field

Tools

Microsoft Intune

Active Directory

Entra ID

Microsoft 365

Azure

Windows Server

Defender for Endpoint

GPOs

Job description

Here's a brief overview of the tasks and responsibilities you'll be able to do:

Responsibilities

• Administer and evolve the Microsoft Intune environment (Endpoint Manager)
• Centrally manage Windows desktop and mobile devices
• Define, deploy, and maintain device configuration profiles, security policies, and compliance mechanisms
• Automate desktop provisioning, configuration, and preparation using Windows Autopilot
• Standardize the deployment of applications, configurations, and installation packages
• Plan and supervise the deployment of Windows updates, security patches and workstation upgrades
• Develop PowerShell scripts to automate administration, configuration, deployment, and remediation tasks
• Implement mechanisms for the detection and automated correction of non-compliant configurations
• Participate in the reinforcement and standardization of workstation security
• Analyze deployment, configuration and compliance issues and apply the required patches
• Maintain technical documentation related to configurations, policies, applications, and postage management processes
• Administer Microsoft Active Directory, Microsoft Entra ID, Microsoft 365, Microsoft Azure and Windows Server environments
• Manage accounts, groups, roles, permissions, and authentication mechanisms, including MFA, SSO, and Conditional Access
• Perform maintenance, updating, monitoring and automation of systems
• Take charge of level 2 and 3 incidents and requests and support teams in the resolution of complex issues
• Diagnose issues related to workstations, access, applications and cloud services
• Identify recurring problems and implement permanent or automated solutions
• Document procedures and solutions to promote knowledge sharing
• Collaborate with external vendors when required
• Participate in the security of systems, identities, workstations and cloud services
• Apply cybersecurity best practices in Microsoft environments
• Contribute to identity and access management in a manner that respects the principle of least privilege
• Support the deployment and administration of endpoint protection solutions
• Analyze security alerts, fix vulnerabilities and participate in incident response
• Implement recommendations from audits, vulnerability scans and security assessments
• Drive continuous improvement of cybersecurity controls

Profile you are looking for

• Hold a degree in computer science, information technology, cybersecurity or a related field
• Have relevant experience in systems administration in a Microsoft environment
• Master Microsoft Intune (Endpoint Manager) and the administration of a fleet of workstations
• Demonstrate experience in automating the deployment and configuration of Windows desktops
• Be familiar with Windows Autopilot and modern desktop management practices
• Use PowerShell for IT administration and automation
• Experience in automated deployment of applications, configurations, and security patches
• Understand Microsoft Active Directory, GPOs, and Microsoft Entra ID
• Be proficient in the core components of Microsoft Azure and Microsoft 365, including Exchange Online, SharePoint Online, Teams and OneDrive
• Develop a good understanding of Windows and Windows Server environments
• Have experience in cybersecurity, particularly in securing Microsoft environments and workstations
• Apply identity and access management principles
• Resolve level 2 and 3 technical incidents rigorously and efficiently
• Demonstrate a strong orientation towards automation, standardization and continuous improvement
• Demonstrate excellent analytical, diagnostic and problem-solving skills
• Identify recurring tasks and propose automated solutions
• Work independently while managing multiple priorities simultaneously
• Collaborate effectively with support teams and clearly communicate technical solutions
• Maintain a constant focus on security, compliance and quality of IT services
• Knowledge of Microsoft Defender for Endpoint and other Microsoft Defender solutions (an asset)
• Experience with Intune security and compliance policies (an asset)
• Proficiency in hybrid Active Directory and Entra ID environments (an asset)
• Experience with vulnerability management (an asset)
• Knowledge of SIEM and security monitoring tools (an asset)
• Understand CIS Controls and NIST repositories (an asset)
• Proficient in networking concepts such as TCP/IP, DNS, DHCP, VPN and firewall (an asset)
• Knowledge of ITIL practices and an ITSM platform is an asset