Endpoint Management & Security Engineer II

CallTower Inc

Birmingham (AL)

On-site

USD 65,000 - 95,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Annual market comp evaluation

85% employer paid medical plans (HDHP和

Dental/Vision

PTO accrual starts day one

100% 401k match on first 4%

Paid Parental Leave

100% Employer paid life insurance, LTD

Job summary

Paylocity is seeking an Endpoint Administrator II to lead deployment, configuration, and security of corporate endpoints across Windows and macOS, with a focus on Microsoft Intune, Entra, and Defender. You will manage the full device lifecycle, from enrollment to retirement, and support enterprise device strategies.

The role emphasizes strong troubleshooting, documentation, and cross-team collaboration to maintain secure, compliant endpoints.

Qualifications

Bachelor of Science in Information Technology or equivalent work experience.
2+ years of endpoint administration, endpoint engineering, or modern workplace management.
MD-102 (Intune) or ability to earn.
Experience administering Microsoft Intune in a production environment.
Experience managing Microsoft Entra, including groups, device identities, authentication methods, and Conditional Access policies.
Experience with Windows Autopilot and Apple Business Manager.
Experience configuring and managing MDM/MAM policies.
Experience with Microsoft Defender for Endpoint.
Familiarity with SOC 2, HIPAA, NIST, ISO 27001, or similar security programs.
Working knowledge of PowerShell scripting and Microsoft Graph automation.
Understanding of Zero Trust security principles and modern identity management practices.
Strong troubleshooting, documentation, and communication skills.

Responsibilities

Configure, deploy, and manage Windows and macOS devices using Microsoft Intune.
Administer Microsoft Entra ID, including group management, device identities, Conditional Access, and authentication services.
Manage endpoint enrollment and provisioning with Windows Autopilot and Apple Device Enrollment.
Deploy, configure, and maintain device compliance policies, configuration profiles, and security baselines.
Administer Defender for Endpoint and participate in endpoint security initiatives.
Manage MDM/MAM policies for corporate and BYOD environments.
Deploy and maintain software packages, updates, and OS upgrades through Intune.
Monitor endpoint health, compliance, inventory, and security status through management platforms.
Troubleshoot device management, enrollment, authentication, compliance, and application deployment issues.
Create and maintain documentation for endpoint management processes, procedures, and standards.
Participate in endpoint-related projects, migrations, upgrades, and technology rollouts.
Collaborate with security, infrastructure, and support teams to ensure a secure and reliable endpoint experience.
Maintain asset inventory accuracy and support device lifecycle processes including onboarding, refreshes, and offboarding.