Endpoint Administrator II

CallTower Inc; Birmingham (AL); On-site; USD 65,000 - 95,000; Full time

Benefits offered by this job

Annual market comp evaluation

85% employer paid medical plans (HDHP和

Dental/Vision

PTO accrual starts day one

100% 401k match on first 4%

Paid Parental Leave

100% Employer paid life insurance, LTD

Job summary

Paylocity is seeking an Endpoint Administrator II to lead deployment, configuration, and security of corporate endpoints across Windows and macOS, with a focus on Microsoft Intune, Entra, and Defender. You will manage the full device lifecycle, from enrollment to retirement, and support enterprise device strategies.

The role emphasizes strong troubleshooting, documentation, and cross-team collaboration to maintain secure, compliant endpoints.

Qualifications

• Bachelor of Science in Information Technology or equivalent work experience.
• 2+ years of endpoint administration, endpoint engineering, or modern workplace management.
• MD-102 (Intune) or ability to earn.
• Experience administering Microsoft Intune in a production environment.
• Experience managing Microsoft Entra, including groups, device identities, authentication methods, and Conditional Access policies.
• Experience with Windows Autopilot and Apple Business Manager.
• Experience configuring and managing MDM/MAM policies.
• Experience with Microsoft Defender for Endpoint.
• Familiarity with SOC 2, HIPAA, NIST, ISO 27001, or similar security programs.
• Working knowledge of PowerShell scripting and Microsoft Graph automation.
• Understanding of Zero Trust security principles and modern identity management practices.
• Strong troubleshooting, documentation, and communication skills.

Responsibilities

• Configure, deploy, and manage Windows and macOS devices using Microsoft Intune.
• Administer Microsoft Entra ID, including group management, device identities, Conditional Access, and authentication services.
• Manage endpoint enrollment and provisioning with Windows Autopilot and Apple Device Enrollment.
• Deploy, configure, and maintain device compliance policies, configuration profiles, and security baselines.
• Administer Defender for Endpoint and participate in endpoint security initiatives.
• Manage MDM/MAM policies for corporate and BYOD environments.
• Deploy and maintain software packages, updates, and OS upgrades through Intune.
• Monitor endpoint health, compliance, inventory, and security status through management platforms.
• Troubleshoot device management, enrollment, authentication, compliance, and application deployment issues.
• Create and maintain documentation for endpoint management processes, procedures, and standards.
• Participate in endpoint-related projects, migrations, upgrades, and technology rollouts.
• Collaborate with security, infrastructure, and support teams to ensure a secure and reliable endpoint experience.
• Maintain asset inventory accuracy and support device lifecycle processes including onboarding, refreshes, and offboarding.

Skills

Endpoint administration

Intune administration

Entra ID/Conditional Access

Defender for Endpoint

MDM/MAM policies

Windows Autopilot

Apple Business Manager

PowerShell scripting

Microsoft Graph automation

Zero Trust security

Security frameworks

Documentation

Communication

Education

Bachelor of Science in Information Technology

Tools

Microsoft Intune (in production)

Microsoft Entra ID

Microsoft Defender for Endpoint

Microsoft Graph automation

Job description

Description

Position Summary

The Endpoint Administrator II is responsible for the deployment, configuration, management, and security of endpoint devices across the CallTower organization. This role focuses on Microsoft Intune, Microsoft Entra, Microsoft Defender, Windows and macOS device management, and modern endpoint administration practices.

As a member of the Endpoint team, this individual will help manage the full device lifecycle, including provisioning, enrollment, compliance, application deployment, security configuration, patch management, and user support for corporate endpoints. The Endpoint Administrator II will also assist with endpoint security initiatives, automation, and continuous improvement of device management processes.

Position Responsibilities

• Configure, deploy, and manage Windows and macOS devices using Microsoft Intune.
• Administer Microsoft Entra ID, including group management, device identities, Conditional Access, and authentication-related services.
• Manage endpoint enrollment and provisioning processes, including Windows Autopilot and Apple device enrollment.
• Deploy, configure, and maintain device compliance policies, configuration profiles, and security baselines.
• Administer Microsoft Defender for Endpoint and participate in endpoint security initiatives.
• Manage mobile device and application management (MDM/MAM) policies for corporate and BYOD environments.
• Deploy and maintain software packages, updates, and operating system upgrades through Intune.
• Monitor endpoint health, compliance, inventory, and security status through management platforms and reporting solutions.
• Troubleshoot device management, enrollment, authentication, compliance, and application deployment issues.
• Create and maintain documentation for endpoint management processes, procedures, and standards.
• Participate in endpoint-related projects, migrations, upgrades, and technology rollouts.
• Collaborate with security, infrastructure, and support teams to ensure a secure and reliable endpoint experience.
• Maintain asset inventory accuracy and support device lifecycle processes including onboarding, refreshes, and offboarding.

Essential Skills and Experience

• Bachelor of Science in Information Technology or equivalent work experience.
• 2+ years of experience in endpoint administration, endpoint engineering, or modern workplace management.
• Microsoft Intune Administrator Associate (MD-102) or ability to earn.
• Experience administering Microsoft Intune in a production environment.
• Experience managing Microsoft Entra, including groups, device identities, authentication methods, and Conditional Access policies. Experience managing Windows 11 and macOS devices in an enterprise environment.
• Experience with endpoint provisioning technologies such as Windows Autopilot and Apple Business Manager.
• Experience configuring and managing MDM/MAM policies.
• Experience with Microsoft Defender for Endpoint and endpoint security best practices.
• Familiarity with compliance frameworks such as SOC 2, HIPAA, NIST, ISO 27001, or similar security programs.
• Working knowledge of PowerShell scripting and Microsoft Graph automation.
• Understanding of Zero Trust security principles and modern identity management practices.
• Strong troubleshooting skills related to endpoint management, authentication, compliance, and device security.
• Excellent written and verbal communication skills.
• Strong documentation skills and attention to detail.Proven ability to take ownership of assigned technologies and drive issues to resolution.

Benefits

• Annual market comp evaluation
• 85% employer paid medical plans (HDHP and PPO options)
• Dental/Vision
• PTO accrual starts day one
• 100% 401k match on first 4%
• Paid Parental Leave
• 100% Employer paid life insurance, LTD, EAP, telehealth, Gym Pass