Endpoint Administrator

Dexian; Chantilly (VA); On-site; USD 52,000 - 62,000; Full time

Benefits offered by this job

Health insurance

401k matching

Generous paid time off

Dental coverage

Job summary

Dexian has an immediate opportunity for an Endpoint Administrator with MS Intune experience to manage and optimize a unified endpoint environment for a premier aerospace client. The role focuses on deployment, configuration, compliance, and security of all corporate-owned and BYOD endpoints across Windows and iOS, using Intune and Entra ID, with on-site requirements in Chantilly, VA.

You'll build configurations, monitor policy enforcement, and collaborate with security teams to maintain secure

Qualifications

• 4–6 years IT systems administration with 2–3 years managing Intune deployments.
• Solid foundation in Microsoft 365 workloads including Entra ID and CA policies.
• Experience with MECM/SCCM and Intune for device management.
• Windows 10/11 and iOS via MDM profiling.
• PowerShell for automation and remediation.
• Strong networking/identity concepts (TCP/IP, DNS, DHCP).

Responsibilities

• Build, test, and deploy Intune configuration profiles, compliance policies, and security baselines.
• Package, test, and distribute software updates and store apps across the enterprise.
• Administer and monitor modern provisioning with Windows Autopilot and Apple Business Manager.
• Manage device enrollment, user changes, groups, and conditional access.
• Tier 2/3 escalation for enrollment failures and app install blocks.
• Monitor Intune dashboards to identify non-compliant devices and remediate drift.
• Maintain deployment process and device lifecycle documentation.

Skills

Intune

PowerShell

MECM/SCCM

Windows OS

Entra ID

Policy management

Troubleshooting

Identity & Access

Problem-solving

Documentation

Education

Associate's degree or higher

MD-102 certification

Tools

Microsoft Endpoint Configuration Manager (MECM)

Microsoft Intune

Microsoft Defender for Endpoint

Apple Business Manager

Windows Autopilot

Entra ID (Azure AD)

Job description

Dexian has an immediate opportunity available for a detail-oriented and motivated Endpoint Administrator with MS Intune experience to manage, maintain, and optimize a unified endpoint management environment for our premier aerospace customer. The Endpoint Administrator will be the primary point of contact for the deployment, configuration, compliance, and security of all corporate-owned and BYOD (Bring Your Own Device) endpoints. Utilizing the Microsoft 365 stack-specifically Microsoft Intune and Microsoft Entra ID-you will ensure seamless, secure hardware and software lifecycles across Windows and iOS platforms.

A typical workday may consist of the following duties as directed by the client:

• Policy & Profile Management: Build, test, and deploy Intune configuration profiles, compliance policies, and security baselines to standardize client environments.
• Application Packaging & Deployment: Package, test, and distribute internal and third-party software updates, web links, and store apps across the enterprise.
• Modern Provisioning: Administer and monitor modern device deployment systems, such as Windows Autopilot and Apple Business Manager, ensuring a zero-touch or minimal-touch provisioning pipeline for new hires.
• Identity & Access Control: Collaborate with identity teams to manage device registration, primary user changes, group memberships, and targeted Conditional Access enforcement.
• Troubleshooting & Escalations: Act as the Tier 2/3 escalation point for device enrollment failures, application installation blocks, and profile synchronization issues.
• Reporting & Governance: Monitor Intune reporting dashboards daily to identify non-compliant devices, update patch status deficiencies, and remediate systemic configuration drift.
• Documentation: Maintain clear, concise documentation outlining deployment processes, app packaging standards, and device lifecycle flows.

REQUIREMENTS AND SKILLS:

To be successful in this role, you should possess the following skills:

• Security Stack Exposure: Familiarity integrating Intune with security tools like Microsoft Defender for Endpoint or implementing data protection via MAM (Mobile Application Management) without full device enrollment.
• Problem-Solving & Analytical Rigor: A structured, logical approach to debugging deployment failures, policy conflicts, and log file analysis.
• Cross-Functional Communication: The ability to explain technical enrollment steps or security restrictions clearly and empathetically to non-technical business professionals.
• Adaptability: Curiosity and willingness to stay current with Microsoft's continuous cloud release notes, feature changes, and best-practice evolutions.

To be eligible for this position, you must meet or exceed each of the following:

• Experience: Four to six (4 - 6) years of progressive experience in IT systems administration, with a minimum of 2-3 years dedicated specifically to managing and deploying policies within Microsoft Intune (Cloud-only or Hybrid/co-management configurations).
• Technical Ecosystem Knowledge: Solid foundation in Microsoft 365 workloads, including Microsoft Entra ID (formerly Azure Active Directory), Conditional Access policies, and Group Policy Objects (GPOs).
  • Ability to install, configure, monitor and troubleshoot Microsoft and third-party enterprise applications across large endpoint environments.
  • Maintain desktop and application packaging of standard, engineered, and tested configurations for remote distribution utilizing Microsoft Endpoint Configuration Manager (MECM) and Intune.
  • Managing endpoint configuration, compliance, and automation through enterprise tools such as MECM/SCCM, Intune, or similar technologies.
• OS Support: Demonstrated experience configuring, enrolling, and troubleshooting Windows 10/11 endpoints. Basic exposure to managing mobile operating systems (iOS) via MDM (Mobile Device Management) profiles.
• Scripting Essentials: Basic proficiency with PowerShell for writing, editing, and deploying automated scripts or application wrappers to endpoints.
  • Performing post deployment remediation and cleanup patching using PowerShell or similar scripting tools to automate updates, enforce configuration baselines, and resolve inconsistent patch states.
• Core Infrastructure: Solid understanding of core networking and identity concepts, including TCP/IP, DNS, DHCP, and modern identity provisioning.

SECURITY CLEARANCE:

This position requires an active Department of Defense security clearance at the SECRET level or ability to obtain and maintain this clearance. U.S. citizens ONLY are eligible for a security clearance and this position.

LOCATION:

• This is an on-site position, and the successful candidate may be based in one of the following locations: El Segundo, CA, Chantilly, VA or Colorado Springs, CO.

EDUCATION and CERTIFICATIONS:

• Associate's degree or higher required
• Possession of or progress toward the Microsoft Certified: Endpoint Administrator Associate (MD-102) certification.

COMPENSATION:

• Dexian reasonably expects to offer $38.00 - $45.00 per hour for this position based on location, skills and experience.
• Additional benefits include generous time off, health, vision and dental insurance and matching 401k.

ADDITIONAL REQUIREMENTS:

• Submit/Pass a 10-year background check, criminal history, drug screening, and fingerprints.
• Valid driver's license/Real-ID with clean driver's history.
• Applicants must have a strong work ethic, be extremely organized and detail-oriented, be a self-starter with excellent time management, problem solving, and multitasking skills.
• Excellent face-to-face customer service skills - at least 1 year experience in a customer service position, such as: call center, retail, or other customer facing role.
• Demonstrated problem solving skills with ability to research, resolve and complete tasks within pre-determined deadlines and schedules.
• Able to process work quickly and accurately despite interruptions, changing timelines and priorities, on a regular basis.
• Strong command of Microsoft Office Suite including Outlook, Excel, and Word programs.
• Working knowledge of app/database ticketing systems. Knowledge of ServiceNow, a plus.
• Position may require dexterity and ability to sit, stand, walk extended distances.

Keywords: Intune, Endpoint, MECM, SCCM

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.

Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals.To learn more, please visit https://dexian.com/.

Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.