Endpoint Administrator

Dexian; El Segundo (CA); On-site; USD 52,000 - 62,000; Full time

Job summary

Dexian is seeking an Endpoint Administrator with MS Intune expertise to manage a unified endpoint environment for a premier aerospace client. You will lead deployment, configuration, and security of corporate-owned and BYOD endpoints across Windows and iOS, using Microsoft Intune and Entra ID.

The role emphasizes policy management, software packaging, provisioning, and identity/access controls, with escalation duties for deployment issues. A security clearance is required or obtainable.

Qualifications

• Proficiency with PowerShell for automation and remediation.
• Structured approach to debugging deployment failures and policy conflicts.
• Ability to explain enrollment steps and security restrictions to non-technical stakeholders.
• Curiosity and willingness to stay current with Microsoft cloud updates.
• Experience managing and deploying Intune policies in corporate environments.

Responsibilities

• Build, test, and deploy Intune configuration profiles and compliance policies.
• Package, test, and distribute software updates and store apps enterprise-wide.
• Administer modern device provisioning with Windows Autopilot and Apple Business Manager.
• Collaborate with identity teams to manage device registration and access controls.
• Serve as Tier 2/3 escalation for enrollment failures and profile issues.
• Monitor Intune dashboards to identify non-compliant devices and drift.

Skills

PowerShell

Problem Solving

Cross-Functional Communication

Adaptability

Education

Associate's degree or higher

Tools

Microsoft Intune

MECM

SCCM

Microsoft Entra ID

Job description

Dexian has an immediate opportunity available for a detail-oriented and motivated Endpoint Administrator with MS Intune experience to manage, maintain, and optimize a unified endpoint management environment for our premier aerospace customer. The Endpoint Administrator will be the primary point of contact for the deployment, configuration, compliance, and security of all corporate-owned and BYOD (Bring Your Own Device) endpoints. Utilizing the Microsoft 365 stack-specifically Microsoft Intune and Microsoft Entra ID -you will ensure seamless, secure hardware and software lifecycles across Windows and iOS platforms.

A typical workday may consist of the following duties as directed by the client:

• Policy & Profile Management: Build, test, and deploy Intune configuration profiles, compliance policies, and security baselines to standardize client environments.
• Application Packaging & Deployment: Package, test, and distribute internal and third-party software updates, web links, and store apps across the enterprise.
• Modern Provisioning: Administer and monitor modern device deployment systems, such as Windows Autopilot and Apple Business Manager, ensuring a zero-touch or minimal-touch provisioning pipeline for new hires.
• Identity & Access Control: Collaborate with identity teams to manage device registration, primary user changes, group memberships, and targeted Conditional Access enforcement.
• Troubleshooting & Escalations: Act as the Tier 2/3 escalation point for device enrollment failures, application installation blocks, and profile synchronization issues.
• Reporting & Governance: Monitor Intune reporting dashboards daily to identify non-compliant devices, update patch status deficiencies, and remediate systemic configuration drift.
• Documentation: Maintain clear, concise documentation outlining deployment processes, app packaging standards, and device lifecycle flows.

REQUIREMENTS AND SKILLS

To be successful in this role, you should possess the following skills:

• Security Stack Exposure: Familiarity integrating Intune with security tools like Microsoft Defender for Endpoint or implementing data protection via MAM (Mobile Application Management) without full device enrollment.
• Problem-Solving & Analytical Rigor: A structured, logical approach to debugging deployment failures, policy conflicts, and log file analysis.
• Cross-Functional Communication: The ability to explain technical enrollment steps or security restrictions clearly and empathetically to non-technical business professionals.
• Adaptability: Curiosity and willingness to stay current with Microsoft's continuous cloud release notes, feature changes, and best-practice evolutions.

To be eligible for this position, you must meet or exceed each of the following:

• Experience: Four to six (4 - 6) years of progressive experience in IT systems administration, with a minimum of 2-3 years dedicated specifically to managing and deploying policies within Microsoft Intune (Cloud-only or Hybrid/co-management configurations).
• Technical Ecosystem Knowledge: Solid foundation in Microsoft 365 workloads, including Microsoft Entra ID (formerly Azure Active Directory), Conditional Access policies, and Group Policy Objects (GPOs).
  • Ability to install, configure, monitor and troubleshoot Microsoft and third-party enterprise applications across large endpoint environments.
  • Maintain desktop and application packaging of standard, engineered, and tested configurations for remote distribution utilizing Microsoft Endpoint Configuration Manager (MECM) and Intune.
  • Managing endpoint configuration, compliance, and automation through enterprise tools such as MECM/SCCM, Intune, or similar technologies.
• OS Support: Demonstrated experience configuring, enrolling, and troubleshooting Windows 10/11 endpoints. Basic exposure to managing mobile operating systems (iOS) via MDM (Mobile Device Management) profiles.
• Scripting Essentials: Basic proficiency with PowerShell for writing, editing, and deploying automated scripts or application wrappers to endpoints.
  • Performing post deployment remediation and cleanup patching using PowerShell or similar scripting tools to automate updates, enforce configuration baselines, and resolve inconsistent patch states.
• Core Infrastructure: Solid understanding of core networking and identity concepts, including TCP/IP, DNS, DHCP, and modern identity provisioning.

This position requires an active Department of Defense security clearance at the SECRET level or ability to obtain and maintain this clearance.

U.S. citizens ONLY are eligible for a security clearance and this position.

LOCATION

• This is an on-site position, and the successful candidate may be based in one of the following locations: El Segundo, CA, Chantilly, VA or Colorado Springs, CO.

EDUCATION and CERTIFICATIONS

• Associate's degree or higher required
• Possession of or progress toward the Microsoft Certified: Endpoint Administrator Associate (MD-102) certification.

COMPENSATION

• Dexian reasonably expects to offer $38.00 - $45.00 per hour for this position based on location, skills and experience. Additional benefits include generous time off, health, vision and dental insurance and matching 401k.

ADDITIONAL REQUIREMENTS

• Submit/Pass a 10-year background check, criminal history, drug screening, and fingerprints.
• Valid driver's license/Real-ID with clean driver's history.
• Applicants must have a strong work ethic, be extremely organized and detail-oriented, be a self-starter with excellent time management, problem solving, and multitasking skills.
• Excellent face-to-face customer service skills - at least 1 year experience in a customer service position, such as: call center, retail, or other customer facing role.
• Demonstrated problem solving skills with ability to research, resolve and complete tasks within pre-determined deadlines and schedules.
• Able to process work quickly and accurately despite interruptions, changing timelines and priorities, on a regular basis.
• Strong command of Microsoft Office Suite including Outlook, Excel, and Word programs.
• Working knowledge of app/database ticketing systems. Knowledge of ServiceNow, a plus.
• Position may require dexterity and ability to sit, stand, walk extended distances.

Keywords: Intune, Endpoint, MECM, SCCM

Desired Skills and Experience

Intune, Endpoint, MECM, SCCM

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support. Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals. To learn more, please visit https://dexian.com/. Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.

Dexian has an immediate opportunity available for a detail-oriented and motivated Endpoint Administrator with MS Intune experience to manage, maintain, and optimize a unified endpoint management environment for our premier aerospace customer. The Endpoint Administrator will be the primary point of contact for the deployment, configuration, compliance, and security of all corporate-owned and BYOD (Bring Your Own Device) endpoints. Utilizing the Microsoft 365 stack-specifically Microsoft Intune and Microsoft Entra ID -you will ensure seamless, secure hardware and software lifecycles across Windows and iOS platforms.

A typical workday may consist of the following duties as directed by the client:

• Policy & Profile Management: Build, test, and deploy Intune configuration profiles, compliance policies, and security baselines to standardize client environments.
• Application Packaging & Deployment: Package, test, and distribute internal and third-party software updates, web links, and store apps across the enterprise.
• Modern Provisioning: Administer and monitor modern device deployment systems, such as Windows Autopilot and Apple Business Manager, ensuring a zero-touch or minimal-touch provisioning pipeline for new hires.
• Identity & Access Control: Collaborate with identity teams to manage device registration, primary user changes, group memberships, and targeted Conditional Access enforcement.
• Troubleshooting & Escalations: Act as the Tier 2/3 escalation point for device enrollment failures, application installation blocks, and profile synchronization issues.
• Reporting & Governance: Monitor Intune reporting dashboards daily to identify non-compliant devices, update patch status deficiencies, and remediate systemic configuration drift.
• Documentation: Maintain clear, concise documentation outlining deployment processes, app packaging standards, and device lifecycle flows.

REQUIREMENTS AND SKILLS

To be successful in this role, you should possess the following skills:

• Security Stack Exposure: Familiarity integrating Intune with security tools like Microsoft Defender for Endpoint or implementing data protection via MAM (Mobile Application Management) without full device enrollment.
• Problem-Solving & Analytical Rigor: A structured, logical approach to debugging deployment failures, policy conflicts, and log file analysis.
• Cross-Functional Communication: The ability to explain technical enrollment steps or security restrictions clearly and empathetically to non-technical business professionals.
• Adaptability: Curiosity and willingness to stay current with Microsoft's continuous cloud release notes, feature changes, and best-practice evolutions.

To be eligible for this position, you must meet or exceed each of the following:

• Experience: Four to six (4 - 6) years of progressive experience in IT systems administration, with a minimum of 2-3 years dedicated specifically to managing and deploying policies within Microsoft Intune (Cloud-only or Hybrid/co-management configurations).
• Technical Ecosystem Knowledge: Solid foundation in Microsoft 365 workloads, including Microsoft Entra ID (formerly Azure Active Directory), Conditional Access policies, and Group Policy Objects (GPOs).
  • Ability to install, configure, monitor and troubleshoot Microsoft and third-party enterprise applications across large endpoint environments.
  • Maintain desktop and application packaging of standard, engineered, and tested configurations for remote distribution utilizing Microsoft Endpoint Configuration Manager (MECM) and Intune.
  • Managing endpoint configuration, compliance, and automation through enterprise tools such as MECM/SCCM, Intune, or similar technologies.
• OS Support: Demonstrated experience configuring, enrolling, and troubleshooting Windows 10/11 endpoints. Basic exposure to managing mobile operating systems (iOS) via MDM (Mobile Device Management) profiles.
• Scripting Essentials: Basic proficiency with PowerShell for writing, editing, and deploying automated scripts or application wrappers to endpoints.
  • Performing post deployment remediation and cleanup patching using PowerShell or similar scripting tools to automate updates, enforce configuration baselines, and resolve inconsistent patch states.
• Core Infrastructure: Solid understanding of core networking and identity concepts, including TCP/IP, DNS, DHCP, and modern identity provisioning.

This position requires an active Department of Defense security clearance at the SECRET level or ability to obtain and maintain this clearance.

U.S. citizens ONLY are eligible for a security clearance and this position.

LOCATION

• This is an on-site position, and the successful candidate may be based in one of the following locations: El Segundo, CA, Chantilly, VA or Colorado Springs, CO.

EDUCATION and CERTIFICATIONS

• Associate's degree or higher required
• Possession of or progress toward the Microsoft Certified: Endpoint Administrator Associate (MD-102) certification.

COMPENSATION

• Dexian reasonably expects to offer $38.00 - $45.00 per hour for this position based on location, skills and experience. Additional benefits include generous time off, health, vision and dental insurance and matching 401k.

ADDITIONAL REQUIREMENTS

• Submit/Pass a 10-year background check, criminal history, drug screening, and fingerprints.
• Valid driver's license/Real-ID with clean driver's history.
• Applicants must have a strong work ethic, be extremely organized and detail-oriented, be a self-starter with excellent time management, problem solving, and multitasking skills.
• Excellent face-to-face customer service skills - at least 1 year experience in a customer service position, such as: call center, retail, or other customer facing role.
• Demonstrated problem solving skills with ability to research, resolve and complete tasks within pre-determined deadlines and schedules.
• Able to process work quickly and accurately despite interruptions, changing timelines and priorities, on a regular basis.
• Strong command of Microsoft Office Suite including Outlook, Excel, and Word programs.
• Working knowledge of app/database ticketing systems. Knowledge of ServiceNow, a plus.
• Position may require dexterity and ability to sit, stand, walk extended distances.

Keywords: Intune, Endpoint, MECM, SCCM

Desired Skills and Experience

Intune, Endpoint, MECM, SCCM

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support. Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals. To learn more, please visit https://dexian.com/. Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.