Intune & M365 Administrator

The Circuit; Covington (KY); On-site; USD 70,000 - 110,000; Full time

Job summary

The Intune & M365 Administrator is responsible for the implementation, administration, and ongoing management of MS Intune and related M365 security policies across ProMach’s global subsidiaries. This role collaborates with the Corp IT team to ensure the M365 tenant aligns with security best practices and reports to the Sr.

Director of Corporate IT Operations in Covington, Kentucky. Based in Covington, KY, the role requires 5+ years in IT with strong expertise in Intune, Defender for Endpoint,

Qualifications

• Bachelor’s Degree in Information Systems or similar area of technical study; or equivalent combination of education and experience
• 5+ years of experience in the Information Technology field
• Advanced proficiency with Microsoft Intune administration (enrollment, compliance, conditional access, config profiles, software deployments)
• Experience assessing and configuring M365 security to recognized best-practice baselines (Microsoft Secure Score)
• Experience with endpoint hardening, encryption (BitLocker), Active Directory, NTFS security, and Group Policy
• Experience with application packaging and deployment
• Experience with PowerShell and the Microsoft Graph API for automation and reporting
• Experience with MS Defender for Endpoint policy administration
• Experience with MS Purview or similar DLP solution is desirable
• Experience with MFA solutions (Duo or similar)
• Familiarity with Azure Arc for server onboarding and management
• Familiarity with enterprise SIEM solutions (MS Sentinel or similar)
• Familiarity with IT security frameworks (NIST, ISO, COBIT, MITRE)
• Ability to communicate with associates at all levels of the organization
• Strong written communications skills with experience writing technical documentation
• Motivated, committed and energetic self-starter dedicated to providing high quality IT service
• Availability to work evenings and weekends, sometimes with little notice
• Willingness to travel if needed < 5%

Responsibilities

• Microsoft Intune Ownership: Implementation & ongoing administration
• Conditional Access Administration
• Endpoint Security Baseline Policies
• Windows OS Security Patching
• Application Deployments
• Microsoft Defender Administration Support
• M365 Tenant Security Configuration
• Azure / M365 Security Monitoring / Incident Response
• Microsoft Purview Data Loss Prevention planning and implementation
• Develops and maintains metrics for M365 & Intune
• Assists with acquisition onboarding (email migrations, tool deployments)
• Tracks IT Security Incidents in ITSM tool (ServiceNow)
• Maintenance of IT security policies and procedures
• General Windows Server, Active Directory, Azure, & O365 support
• Routine server maintenance and disaster recovery testing
• Internal and external IT audits and assessments
• Second level support for escalated incidents
• Vendor / 3rd party relationships management
• Performs other duties as assigned

Skills

Intune administration

M365 security

PowerShell

Microsoft Graph API

Azure Arc

Endpoint hardening

Documentation

Communication

Time management

Education

Bachelor’s Degree in Information Systems or similar

Tools

ServiceNow

Microsoft Defender for Endpoint

Microsoft Purview

Job description

Job Description: The Intune & M365 Administrator is responsible for the implementation, administration, and ongoing management of MS Intune and related M365 security policies across ProMach’s 60+ global subsidiaries. This role will collaborate with the Corp IT team to ensure the M365 tenant is in alignment with security best practices. In addition, this position is a key contributor in departmental projects and provides second tier support and training for all technology related issues and inquiries, coordinating with appropriate support departments as necessary. This position reports to the Sr. Director of Corporate IT Operations and will be based in Covington, Kentucky.

Job Functions

• Microsoft Intune Ownership
  • Implementation & Ongoing Administration
  • Conditional Access Administration
  • Endpoint Security Baseline Policies
  • Windows OS Security Patching
  • Application Deployments
• Microsoft Defender Administration Support, (policies, tagging, etc.)
• M365 Tenant Security Configuration, (Best Practices, Microsoft Secure Score, etc.)
• Azure / M365 Security Monitoring / Incident Response
• Microsoft Purview Data Loss Prevention, (participates in initial planning and implementation)
• Develops and maintains Metrics for M365 & Intune
• Assists with acquisition onboarding process, (email migrations, tool deployments, etc.)
• Tracks IT Security Incidents in ITSM tool, (ServiceNow)
• Assists with maintenance of IT security policies and related procedures.
• Assists with general Windows Server, Active Directory, Azure, & O365 support and administration.
• Participates in routine server maintenance and assists with recurring Disaster Recovery tests.
• Participates in internal and external IT audits and assessments
• Performs second level support for incidents escalated by team members.
• Fosters and maintains key vendor / 3rd party service and support relationships.
• Performs other duties as assigned.

Qualification Requirements

• Bachelor’s Degree in Information Systems or similar area of technical study; or equivalent combination of education and experience
• 5+ years of experience in the Information Technology field
• Advanced proficiency with Microsoft Intune administration, (enrollment, compliance, conditional access, config profiles, software deployments, update rings, etc.)
• Experience assessing and configuring M365 security to recognized best-practice baselines (Microsoft Secure Score, etc.)
• Experience with endpoint hardening, encryption (BitLocker), Active Directory, NTFS security, and Group Policy.
• Experience with application packaging and deployment.
• Experience with PowerShell and the Microsoft Graph API for automation and reporting.
• Experience with MS Defender for Endpoint policy administration
• Experience with MS Purview or similar DLP solution is desirable.
• Experience with MFA solutions, (Duo or similar)
• Familiarity with Azure Arc for server onboarding and management.
• Familiarity with enterprise SIEM solutions, (MS Sentinel or similar)
• Familiarity with one or more IT security frameworks, (NIST, ISO, COBIT, MITRE, etc.)
• Ability to communicate with associates at all levels of the organization
• Strong written communications skills with experience writing technical documentation
• Motivated, committed and energetic self-starter dedicated to providing high quality and responsive IT service
• Availability to work evenings and weekends, sometimes with little notice.
• Willingness to travel if needed < 5%