Hybrid Identity & Endpoint Admin (M365/Intune)

Automatic Data Processing, Inc.; Minneapolis (MN); Hybrid; USD 84,000 - 105,000; Full time

Benefits offered by this job

Annual bonus program

Paid floating holidays

401(k) retirement contributions

Job summary

Plus Relocation is seeking a hands-on Microsoft 365 Identity/Endpoint Administrator in Minneapolis. You will own the complete identity lifecycle across Active Directory and Entra ID, manage Windows endpoints, and drive automation to improve security and employee experience.

This is a hybrid role with collaboration across local and global teams. The role emphasizes on-prem and cloud identity, PowerShell work, and close partnership with Security and Compliance.

Qualifications

• 3+ years of hands-on Active Directory administration in a production domain.
• Group Policy authoring, precedence, and troubleshooting.
• Hybrid identity experience with Entra Connect/Cloud Sync.
• Role-based access control and least privilege concepts.
• PowerShell and Microsoft Graph automation for identity tasks.
• Complete offboarding workflow including access revocation and data cleanup.
• NTFS and share permissions on Windows file servers.

Responsibilities

• Own the full identity lifecycle across on-prem AD and Entra ID.
• Design and maintain RBAC using security groups and the AGDLP model.
• Administer Group Policy, OU structure, and delegation of control.
• Run access reviews and clean up stale/orphaned accounts and privileged groups.
• Administer Microsoft 365 services and manage Windows endpoints via Intune and Autopilot.
• Provide hands-on local support and remote support for US/global employees.

Skills

Active Directory

Group Policy

PowerShell

Entra ID

Microsoft 365

Intune

Security awareness

Education

Professional certifications (optional)

Tools

Entra Connect

Cloud Sync

Intune

Autopilot

Graph PowerShell

Job description

Plus Relocation is seeking a hands-on Microsoft 365 Identity/Endpoint Administrator in Minneapolis. You will own the complete identity lifecycle across Active Directory and Entra ID, manage Windows endpoints, and drive automation to improve security and employee experience.

This is a hybrid role with collaboration across local and global teams. The role emphasizes on-prem and cloud identity, PowerShell work, and close partnership with Security and Compliance.