Identity & Endpoint Administrator — Microsoft 365 (Hybrid)

Plusrelocation; Minneapolis (MN); Hybrid; USD 84,000 - 105,000; Full time

Benefits offered by this job

Profit‑sharing bonus

Floating holidays

401(k) plan

Medical plans

Dental & Vision

HSA contributions

PTO & volunteer time

Insurance: life/AD&D

EAP

Wellness programs

Job summary

Plus Relocation in Minneapolis is seeking a hands-on Microsoft 365 Identity Endpoint Administrator to own the identity lifecycle across on-prem Active Directory and Entra ID, manage Windows endpoints, and help advance automation, security, and the employee experience.

The role requires design of RBAC with security groups, Group Policy administration, and ongoing access reviews. Strong PowerShell and Graph scripting skills, plus Microsoft 365 administration, are essential for success.

Qualifications

• 3+ years of hands-on Active Directory administration.
• Group Policy experience: authoring, precedence and inheritance, security and troubleshooting.
• Hybrid identity experience with Entra Connect or Cloud Sync.
• Practical knowledge of RBAC, Entra admin roles, least privilege.
• PowerShell and Microsoft Graph scripting.
• Offboarding processes including account disablement and data access revocation.
• Experience with NTFS and share permissions on Windows file servers.
• Microsoft 365 administration and Windows troubleshooting.
• Strong communication and security awareness.

Responsibilities

• Own identity lifecycle across on-prem Active Directory and Entra ID.
• Design and maintain RBAC using security groups and least privilege.
• Administer Group Policy, OU structure, and delegation of control.
• Run access reviews and clean up stale/orphaned accounts; provide audit-ready evidence.
• Administer Microsoft 365 and manage Windows endpoints via Intune/Autopilot.
• Provide hands-on local support and remote support for US/global employees.
• Build PowerShell and Graph automations with service accounts and proper change control.
• Partner with Security on MFA, Conditional Access, audits, and AI tool usage.

Skills

Active Directory

Group Policy

Entra ID

PowerShell

Microsoft 365

Intune

Endpoints management

Hybrid identity

Security awareness

Tools

Azure AD Connect

Autopilot

Graph PowerShell

Job description

Plus Relocation in Minneapolis is seeking a hands-on Microsoft 365 Identity Endpoint Administrator to own the identity lifecycle across on-prem Active Directory and Entra ID, manage Windows endpoints, and help advance automation, security, and the employee experience.

The role requires design of RBAC with security groups, Group Policy administration, and ongoing access reviews. Strong PowerShell and Graph scripting skills, plus Microsoft 365 administration, are essential for success.