IT End-point Administrator

XPEL; San Antonio (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

XPEL is seeking an IT Endpoint Administrator to own the configuration and operation of the enterprise's endpoint environments, including tenant configuration and access management across platforms.

You will administer Microsoft Intune, EntraID, and Autopilot, manage device enrollment and security baselines, and coordinate with IT support and software teams for changes, audits, and documentation.

Qualifications

• BS in a technical field, or equivalent experience.
• Extensive working knowledge with Microsoft 365, Intune Administration, EntraID, Windows Autopilot.
• 3 to 5 years of experience administering enterprise Endpoint, Endpoint Security policies, BitLocker, Windows Update for Business, or security baselines.
• Experience with PowerShell scripting or automation for Endpoint administration.
• Experience managing roles, permissions, and access controls across business systems.

Responsibilities

• Administer and maintain XPEL’s Microsoft Intune environment across the enterprise.
• Manage Patch Management updates for Windows and MAC devices.
• Manage device enrollment, configuration profiles, compliance policies, application deployments, endpoint baselines, and device targeting.
• Support Microsoft Entra joined and Intune-managed device models.
• Maintain accurate asset records, ownership assignments, warranty information, lifecycle status, and inventory reporting.
• Own Endpoint configuration and setup, including feature configuration and settings-level customization per tenant.
• Partner with IT Tech Support to reduce recurring Endpoint incidents and improve first-contact resolution.
• Coordinate with Software team for changes requiring code or a custom build; this role configures and operates but does not build.
• Own the running of external IT audit support for controls this role operates, primarily access, permissions, and user recertifications, and coordinate audit evidence.

Education

BS in a technical field

Tools

Microsoft Intune

EntraID

Windows Autopilot

PowerShell

Job description

The IT Endpoint Administrator owns the configuration and operation of XPEL's software tenants across the enterprise. This role is the operator and administrator of complete lifecycle of Endpoint hardware and devices, managing how they are set up and run for the business, and is the point of ownership for tenant configuration, access, and the prebuilt integrations that run inside these platforms.

Core Duties

• Administer and maintain XPEL’s Microsoft Intune environment across the enterprise of systems.
• Manage Patch Management updates for Windows and MAC devices.
• Manage device enrollment, configuration profiles, compliance policies, application deployments, endpoint baselines, and device targeting.
• Support Microsoft Entra joined and Intune-managed device models.
• Maintain accurate asset records, ownership assignments, warranty information, lifecycle status, and inventory reporting.
• Manage roles, permissions, and user access within these systems, and maintain appropriate access controls for Windows and MAC Devices.
• Own Endpoint configuration and setup, including feature configuration and settings-level customization per tenant.
• Partner with IT Tech Support team to reduce recurring Endpoint incidents and improve first-contact resolution.
• Coordinate with the Software team for any change requiring code or a custom build; this role configures and operates but does not build.
• Own the running of external IT audit support for the controls this role operates, primarily access, permissions, and user recertifications, and coordinate audit evidence for those controls.
• Maintain the recertification cycle and keep access and configuration records current.
• Maintain documentation of tenant configurations, access, and integration setups.
• Other duties as needed

Basic Qualifications

• BS in a technical field, or equivalent experience.
• Extensive working knowledge with Microsoft 365, Intune Administration, EntraID, Windows Autopilot.
• Extensive working knowledge of Device enrollment and management.
• 3 to 5 years of experience administering enterprise Endpoint, Endpoint Security policies, BitLocker, Windows Update for Business, or security baselines.
• Experience with PowerShell scripting or automation for Endpoint administration.
• Experience managing roles, permissions, and access controls across business systems.
• Experience configuring and operating SaaS integrations desired.

XPEL is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.