Identity & Endpoint Administrator - Hybrid Minneapolis

Plusrelocation; Minneapolis (MN); Hybrid; USD 84,000 - 105,000; Full time

Benefits offered by this job

Annual discretionary profit-sharing

Paid floating holiday

401(k) retirement contributions

Job summary

Plus Relocation is seeking a hands-on Microsoft 365, Identity & Endpoint Administrator to own the full identity lifecycle across Active Directory and Entra ID, manage Windows endpoints, and advance automation and security. The role supports both local and global users in a hybrid Minneapolis environment.

You will design role-based access, administer Group Policy, and run regular access reviews while implementing least privilege and robust auditing. Strong collaboration with Security is expected.

Qualifications

• Hands-on AD administration including users, groups, OUs, DNS and replication basics.
• Strong Group Policy knowledge and troubleshooting with rsop/gpresult.
• Hybrid identity experience with Entra Connect or Cloud Sync.
• Practical RBAC and least privilege concepts for Entra admin roles.
• PowerShell and Microsoft Graph automation for identity tasks.

Responsibilities

• Own full identity lifecycle across on-prem AD and Entra ID, including new-hire setup and rapid offboarding.
• Design RBAC using security groups and the AGDLP model with least privilege.
• Administer Group Policy, OU structure, and delegation of control.
• Run access reviews, cleanup stale accounts, and produce audit-ready evidence.
• Manage Microsoft 365 services and Windows endpoints via Intune, Autopilot, and configuration policies.
• Provide hands-on local support and remote support for US/global employees.

Skills

Active Directory

Entra ID

Group Policy

PowerShell

Microsoft 365 administration

Intune

Autopilot

Security & Compliance

Tools

Graph PowerShell

Azure AD Connect

Job description

Plus Relocation is seeking a hands-on Microsoft 365, Identity & Endpoint Administrator to own the full identity lifecycle across Active Directory and Entra ID, manage Windows endpoints, and advance automation and security. The role supports both local and global users in a hybrid Minneapolis environment.

You will design role-based access, administer Group Policy, and run regular access reviews while implementing least privilege and robust auditing. Strong collaboration with Security is expected.