Endpoint Administrator II

CallTower; Birmingham (AL); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Market compensation evaluation

Employer paid medical plans

Dental/Vision

PTO accrual starts day one

401k match on first 4%

Parental Leave

Life insurance and LTD

Job summary

CallTower is seeking an Endpoint Administrator II in Birmingham, AL to deploy and secure Windows and macOS devices using Microsoft Intune and Entra. You will manage enrollment, compliance, and security configurations across corporate endpoints.

The role requires 2+ years in endpoint administration, familiarity with Autopilot and Apple Business Manager, and strong documentation and communication skills. Join a growing team focused on modern endpoint management practices.

Qualifications

• BS in Information Technology or equivalent work experience.
• 2+ years in endpoint administration, engineering, or modern workplace management.
• MD-102 or ability to earn Microsoft Intune Administrator certification.
• Experience managing Intune, Entra, Defender in production environments.
• Experience with Windows Autopilot and Apple device provisioning.
• Familiarity with MDM/MAM policies and security baselines.
• Strong documentation and communication skills.

Responsibilities

• Configure, deploy, and manage Windows and macOS devices with Intune.
• Administer Entra ID, groups, device identities, and CA policies.
• Handle enrollment and provisioning via Autopilot and Apple Business Manager.
• Maintain device compliance policies and security baselines.
• Manage Defender for Endpoint and endpoint security initiatives.
• Oversee MDM/MAM for corporate and BYOD environments.
• Deploy software updates and OS upgrades through Intune.
• Monitor endpoint health, compliance, inventory, and security status.
• Troubleshoot enrollment, authentication, compliance, and deployment issues.
• Create and maintain endpoint management documentation.
• Collaborate with security, infrastructure, and support teams on rollouts.
• Support asset lifecycle: onboarding, refresh, offboarding.

Skills

Endpoint administration

Documentation

Communication skills

Troubleshooting

Zero Trust concepts

Education

Bachelor of Science in Information Technology

Tools

Microsoft Intune

Microsoft Entra

Microsoft Defender for Endpoint

Windows Autopilot

Apple Business Manager

PowerShell

Microsoft Graph

Job description

Description

Position Summary

The Endpoint Administrator II is responsible for the deployment, configuration, management, and security of endpoint devices across the CallTower organization. This role focuses on Microsoft Intune, Microsoft Entra, Microsoft Defender, Windows and macOS device management, and modern endpoint administration practices.

As a member of the Endpoint team, this individual will help manage the full device lifecycle, including provisioning, enrollment, compliance, application deployment, security configuration, patch management, and user support for corporate endpoints. The Endpoint Administrator II will also assist with endpoint security initiatives, automation, and continuous improvement of device management processes.

Position Responsibilities

• Configure, deploy, and manage Windows and macOS devices using Microsoft Intune.
• Administer Microsoft Entra ID, including group management, device identities, Conditional Access, and authentication-related services.
• Manage endpoint enrollment and provisioning processes, including Windows Autopilot and Apple device enrollment.
• Deploy, configure, and maintain device compliance policies, configuration profiles, and security baselines.
• Administer Microsoft Defender for Endpoint and participate in endpoint security initiatives.
• Manage mobile device and application management (MDM/MAM) policies for corporate and BYOD environments.
• Deploy and maintain software packages, updates, and operating system upgrades through Intune.
• Monitor endpoint health, compliance, inventory, and security status through management platforms and reporting solutions.
• Troubleshoot device management, enrollment, authentication, compliance, and application deployment issues.
• Create and maintain documentation for endpoint management processes, procedures, and standards.
• Participate in endpoint-related projects, migrations, upgrades, and technology rollouts.
• Collaborate with security, infrastructure, and support teams to ensure a secure and reliable endpoint experience.
• Maintain asset inventory accuracy and support device lifecycle processes including onboarding, refreshes, and offboarding.

Essential Skills and Experience

• Bachelor of Science in Information Technology or equivalent work experience.
• 2+ years of experience in endpoint administration, endpoint engineering, or modern workplace management.
• Microsoft Intune Administrator Associate (MD-102) or ability to earn.
• Experience administering Microsoft Intune in a production environment.
• Experience managing Microsoft Entra, including groups, device identities, authentication methods, and Conditional Access policies. Experience managing Windows 11 and macOS devices in an enterprise environment.
• Experience with endpoint provisioning technologies such as Windows Autopilot and Apple Business Manager.
• Experience configuring and managing MDM/MAM policies.
• Experience with Microsoft Defender for Endpoint and endpoint security best practices.
• Familiarity with compliance frameworks such as SOC 2, HIPAA, NIST, ISO 27001, or similar security programs.
• Working knowledge of PowerShell scripting and Microsoft Graph automation.
• Understanding of Zero Trust security principles and modern identity management practices.
• Strong troubleshooting skills related to endpoint management, authentication, compliance, and device security.
• Excellent written and verbal communication skills.
• Strong documentation skills and attention to detail.Proven ability to take ownership of assigned technologies and drive issues to resolution.

Benefits

• Annual market comp evaluation
• 85% employer paid medical plans (HDHP and PPO options)
• Dental/Vision
• PTO accrual starts day one
• 100% 401k match on first 4%
• Paid Parental Leave
• 100% Employer paid life insurance, LTD, EAP, telehealth, Gym Pass