M365 Identity & Endpoint Administrator | Hybrid Role

Plus-Relocation-1; Minneapolis (MN); Hybrid; USD 84,000 - 105,000; Full time

Benefits offered by this job

Annual discretionary bonus

PTO

401(k) retirement contributions

Health insurance

Hybrid work arrangement

Job summary

Plus Relocation is seeking a hands-on Microsoft 365 Identity Endpoint Administrator in Minneapolis, MN. You will own the identity lifecycle across Active Directory and Entra ID, manage Windows endpoints, and help improve automation, security, and employee experience.

This full-time exempt role combines on-site and hybrid work, with duties including IAM lifecycle, RBAC design, Group Policy, Intune/Autopilot, and PowerShell automation.

Qualifications

• Hands-on experience managing Active Directory users, groups, OUs, DNS and replication.
• Strong Group Policy knowledge, troubleshooting and RSOP/gpresult use.
• Hybrid identity experience with Entra Connect or Cloud Sync.
• Experience with least privilege, RBAC and admin accounts for privileged work.
• PowerShell and Microsoft Graph scripting for identity tasks.
• Clear communication and strong service orientation.

Responsibilities

• Own the full identity lifecycle across on-prem AD and Entra ID for hires, transfers and deprovisioning within 24 hours.
• Design and maintain role-based access using security groups and the AGDLP model.
• Administer Group Policy, OU structure, and delegation of control.
• Run access reviews and clean up stale or orphaned accounts; provide audit-ready evidence.
• Administer Microsoft 365 (Exchange Online, Teams, SharePoint) and manage Windows endpoints via Intune/Autopilot.
• Build PowerShell and Graph automations with service accounts and documented change control.
• Collaborate with Security/Compliance on MFA, CA, data deletion and AI tool use.

Skills

Active Directory administration

Group Policy

Hybrid identity

PowerShell

Microsoft 365

Entra ID

Security awareness

Tools

Intune

Autopilot

Microsoft Graph PowerShell

Exchange Online

Entra ID

Job description

Plus Relocation is seeking a hands-on Microsoft 365 Identity Endpoint Administrator in Minneapolis, MN. You will own the identity lifecycle across Active Directory and Entra ID, manage Windows endpoints, and help improve automation, security, and employee experience.

This full-time exempt role combines on-site and hybrid work, with duties including IAM lifecycle, RBAC design, Group Policy, Intune/Autopilot, and PowerShell automation.