Information Technology Systems Administrator Manager

Confidential; Denver (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

Confidential in Denver seeks an IT Systems Administrative Manager to own the Microsoft 365 and endpoint environment across corporate and property locations. You will build, administer, and troubleshoot Intune, Autopilot, and Entra ID, ensuring devices are enrolled, secure, and managed while automating tasks.

You will lead endpoint management, identity governance, and end-user support, collaborating with the Director of Technology.

Qualifications

• 5+ years of IT experience in systems administration.
• Hands-on with Microsoft 365 and Entra ID, including MFA and CA.
• Experience with Intune and Windows Autopilot at scale.
• Strong PowerShell scripting and automation experience.
• Cloud-first Microsoft environment familiarity and security tooling.

Responsibilities

• Administer Intune, Autopilot, and device enrollment across locations.
• Manage Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive).
• Oversee Entra ID, CA, MFA, and PIM with user provisioning and licensing.
• Provide hands-on end-user support via Freshservice and onsite as needed.
• Write automation scripts and manage asset inventories and docs.

Skills

Microsoft 365 administration

Entra ID administration

Intune administration

Windows Autopilot

PowerShell scripting

Automation/AI in IT

Education

Bachelor's degree in IT/CS

Tools

Intune

Windows Autopilot

Entra ID

Microsoft 365

PowerShell

Microsoft Graph

Datto RMM

Freshservice

PhishER

Microsoft Defender

Job description

Job Purpose

The IT Systems Administrative Manager is the hands‑on technical owner of the organization's Microsoft 365 and endpoint environment across corporate and property locations. This role is responsible for building, administering, and troubleshooting Microsoft Intune, Windows Autopilot, and Entra ID. Knowledge and experience with these technologies are required.

All the relevant skills, qualifications and experience that a successful applicant will need are listed in the following description.

The position is accountable for ensuring company devices are enrolled, secured, and managed. Working closely with the Director of Technology, the IT Systems Administrative Manager maintains secure and reliable systems, provides direct employee support, and leverages automation and AI to reduce manual work. This is a hands‑on role requiring ownership of projects from start to finish and consistent follow-through on commitments.

Essential Job Duties

Endpoint Management (Intune and Autopilot)

• Administer Microsoft Intune and Windows Autopilot, including deployment profiles, Enrollment Status Page, configuration and compliance policies, application deployment, and update rings.
• Register and enroll existing and new Windows devices into Autopilot and Intune, including collecting hardware hashes at scale and troubleshooting enrollment failures using Intune and device logs.
• Lead efforts to bring all company Windows devices under management, tracking progress and reporting on compliance.
• Manage the full device lifecycle using Intune, Autopilot, Apple Business Manager, and Datto RMM, from provisioning and shipping new-hire equipment through device resets, reassignment, and retirement.
• Package, deploy, and patch applications through Intune and related tools.

Microsoft 365 and Identity

• Administer Microsoft 365, including Exchange Online, Teams, SharePoint, and OneDrive, across Windows, macOS, and mobile platforms.
• Administer Entra ID, including Conditional Access, multifactor authentication (MFA), passwordless authentication, device compliance, and privileged identity management (PIM).
• Manage user provisioning, group management, and licensing across Microsoft 365 and third‑party SaaS platforms, including single sign‑on (SSO) and SCIM integrations.
• Manage employee onboarding and offboarding, including account setup, device configuration, and access removal.
• Write and maintain PowerShell and Microsoft Graph scripts to automate administration and reporting.

End‑User Support

• Provide hands‑on support to corporate employees through Freshservice, both in person and remotely, resolving device, application, and connectivity issues within defined service‑level agreements (SLAs).
• Serve as the escalation point for the managed service provider supporting property teams.
• Support conference rooms, video conferencing, and meeting‑room hardware, including providing in‑person support at the corporate office.

Security

• Monitor and respond to security alerts and phishing reports using Microsoft Defender, Darktrace, and PhishER.
• Maintain device and identity security baselines and participate in audits and remediation efforts.

Automation, Documentation, and Projects

• Identify and implement automation and AI solutions that reduce manual, repetitive IT work.
• Maintain hardware and software inventories and clear documentation of configurations, procedures, and user instructions.
• Own assigned IT projects from start to finish, including technology deployments for new and acquired properties, and follow through on all commitments.
• Work with vendors on licensing, support, and escalations, and support property‑critical platforms such as access control, surveillance, and VoIP.

Education

Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.

Work Experience

Required:

• 5+ years of IT experience in systems administration, including at least 3 years administering Microsoft 365 and Entra ID.
• Hands‑on, production experience with Microsoft Intune and Windows Autopilot, including personally enrolling and managing Windows devices at scale, configuring deployment profiles and policies, and troubleshooting enrollment issues. Planning or overseeing this work alone is not sufficient.
• Experience working in a cloud‑only or cloud‑first Microsoft environment, including Conditional Access and multifactor authentication (MFA).
• Working knowledge of PowerShell, including writing and troubleshooting scripts for Microsoft 365 or Intune administration.

Preferred:

• Experience with Apple Business Manager and managing iPads or Macs through Intune.
• Experience with Microsoft Defender, Darktrace, or similar security tools.
• Experience applying AI and automation to IT operations.
• Experience in multifamily housing, property management, or multi‑site environments.
• Experience working with a managed service provider.

Skills and Competencies

• Excellent interpersonal and communication skills, with the ability to communicate effectively with internal and external stakeholders and translate technical concepts for non‑technical audiences.
• Strong problem‑solving, organizational, and independent decision‑making skills.
• Ability to handle confidential and sensitive information with discretion. xzgxqkn
• Ability to work independently, take initiative, and adapt to changing priorities.