Endpoint Management & Security Engineer II

CallTower Inc; Birmingham (AL); On-site; USD 65,000 - 95,000; Full time

Benefits offered by this job

Annual market comp evaluation

85% employer paid medical plans (HDHP和

Dental/Vision

PTO accrual starts day one

100% 401k match on first 4%

Paid Parental Leave

100% Employer paid life insurance, LTD

Job summary

Paylocity is seeking an Endpoint Administrator II to lead deployment, configuration, and security of corporate endpoints across Windows and macOS, with a focus on Microsoft Intune, Entra, and Defender. You will manage the full device lifecycle, from enrollment to retirement, and support enterprise device strategies.

The role emphasizes strong troubleshooting, documentation, and cross-team collaboration to maintain secure, compliant endpoints.

Qualifications

• Bachelor of Science in Information Technology or equivalent work experience.
• 2+ years of endpoint administration, endpoint engineering, or modern workplace management.
• MD-102 (Intune) or ability to earn.
• Experience administering Microsoft Intune in a production environment.
• Experience managing Microsoft Entra, including groups, device identities, authentication methods, and Conditional Access policies.
• Experience with Windows Autopilot and Apple Business Manager.
• Experience configuring and managing MDM/MAM policies.
• Experience with Microsoft Defender for Endpoint.
• Familiarity with SOC 2, HIPAA, NIST, ISO 27001, or similar security programs.
• Working knowledge of PowerShell scripting and Microsoft Graph automation.
• Understanding of Zero Trust security principles and modern identity management practices.
• Strong troubleshooting, documentation, and communication skills.

Responsibilities

• Configure, deploy, and manage Windows and macOS devices using Microsoft Intune.
• Administer Microsoft Entra ID, including group management, device identities, Conditional Access, and authentication services.
• Manage endpoint enrollment and provisioning with Windows Autopilot and Apple Device Enrollment.
• Deploy, configure, and maintain device compliance policies, configuration profiles, and security baselines.
• Administer Defender for Endpoint and participate in endpoint security initiatives.
• Manage MDM/MAM policies for corporate and BYOD environments.
• Deploy and maintain software packages, updates, and OS upgrades through Intune.
• Monitor endpoint health, compliance, inventory, and security status through management platforms.
• Troubleshoot device management, enrollment, authentication, compliance, and application deployment issues.
• Create and maintain documentation for endpoint management processes, procedures, and standards.
• Participate in endpoint-related projects, migrations, upgrades, and technology rollouts.
• Collaborate with security, infrastructure, and support teams to ensure a secure and reliable endpoint experience.
• Maintain asset inventory accuracy and support device lifecycle processes including onboarding, refreshes, and offboarding.

Skills

Endpoint administration

Intune administration

Entra ID/Conditional Access

Defender for Endpoint

MDM/MAM policies

Windows Autopilot

Apple Business Manager

PowerShell scripting

Microsoft Graph automation

Zero Trust security

Security frameworks

Documentation

Communication

Education

Bachelor of Science in Information Technology

Tools

Microsoft Intune (in production)

Microsoft Entra ID

Microsoft Defender for Endpoint

Microsoft Graph automation

Job description

Paylocity is seeking an Endpoint Administrator II to lead deployment, configuration, and security of corporate endpoints across Windows and macOS, with a focus on Microsoft Intune, Entra, and Defender. You will manage the full device lifecycle, from enrollment to retirement, and support enterprise device strategies.

The role emphasizes strong troubleshooting, documentation, and cross-team collaboration to maintain secure, compliant endpoints.