Identity & Endpoint Admin - Microsoft 365 & Security

Plusrelocation; Minneapolis (MN); Hybrid; USD 84,000 - 105,000; Full time

Benefits offered by this job

Annual discretionary profit-sharing

Paid floating holiday

401(k) retirement contributions

Job summary

Plus Relocation is seeking a hands-on Microsoft 365, Identity & Endpoint Administrator in Minneapolis, MN. You will own the identity lifecycle across AD and Entra ID, manage Windows endpoints via Intune/Autopilot, and build automations with PowerShell and Microsoft Graph.

The role is hybrid, full-time, with a base salary range of $84,000–$105,000 and benefits including profit-sharing, PTO, health coverage, and a 401(k). You will collaborate with Security and Compliance on MFA and CA policies.

Qualifications

• 3+ years of hands-on Active Directory administration in a production domain.
• Group Policy authoring, precedence and troubleshooting.
• Hybrid identity experience with Entra Connect or Cloud Sync.
• RBAC, least privilege, Entra admin roles and separate admin accounts.
• PowerShell and Graph PowerShell for identity tasks.
• Complete offboarding: disable accounts, revoke MFA, remove licenses and manage mailbox/OneDrive.
• NTFS and share permissions on Windows file servers.
• Solid Microsoft 365 administration and Windows troubleshooting.
• Strong communication and ownership.

Responsibilities

• Own the full identity lifecycle across on-prem AD and Entra ID.
• Design and maintain role-based access using security groups.
• Administer Group Policy, OU structure, and delegation of control.
• Run regular access reviews and clean up stale/orphaned accounts.
• Administer Microsoft 365 and manage Windows endpoints via Intune/Autopilot.
• Provide hands-on local support and remote global support.
• Build PowerShell and Graph automations with service accounts.
• Partner with Security on MFA and Conditional Access policies.

Skills

Active Directory administration

PowerShell scripting

Microsoft 365 administration

Hybrid identity management

Security & Compliance collaboration

Education

AZ-802 (Windows Server Hybrid Administrator Associate)

SC-300 (Identity and Access Administrator)

MD-102 (Endpoint Administrator)

Tools

Entra ID

Intune

Autopilot

Microsoft Graph PowerShell

gpresult/RSOP

Entra Connect

Azure AD

Job description

Plus Relocation is seeking a hands-on Microsoft 365, Identity & Endpoint Administrator in Minneapolis, MN. You will own the identity lifecycle across AD and Entra ID, manage Windows endpoints via Intune/Autopilot, and build automations with PowerShell and Microsoft Graph.

The role is hybrid, full-time, with a base salary range of $84,000–$105,000 and benefits including profit-sharing, PTO, health coverage, and a 401(k). You will collaborate with Security and Compliance on MFA and CA policies.