Microsoft Intune System Administrator

GovCIO; Baton Rouge (LA); Remote; USD 108,000 - 145,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Job summary

GovCIO seeks an experienced Intune Systems Administrator to manage a multi‑platform endpoint ecosystem for a HUD contract. You will design, deploy, and maintain zero‑touch enrollment, configuration profiles, and compliance policies across Windows, macOS, and iOS devices.

The role requires hands‑on UEM experience, ABM integration, and cloud‑first security baselines. This fully remote US posting offers a competitive salary and broad benefits.

Qualifications

• Bachelor's degree and 12+ years of system administration experience.
• 3–5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Intune / Endpoint Manager.
• Hands-on experience integrating ABM with Intune, VPP app management, FileVault management, and macOS Bash scripting (JAMF knowledge preferred).
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration.
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines.
• Experience configuring iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment.

Responsibilities

• Configure zero-touch onboarding for Windows Autopilot, ADE via ABM, and iOS/iPadOS enrollment.
• Manage macOS configuration profiles, MDM payloads, and Bash scripts for custom settings.
• Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and remediation scripts.
• Package, test, and deploy applications across Win32, macOS PKG/DMG, and iOS App Store / VPP.
• Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps.
• Implement CA policies, MAM, and compliance policies linked with Defender for Endpoint.

Skills

Intune / Endpoint Manager

ABM integration

Windows Autopilot

PowerShell scripting

BitLocker

FileVault

Azure AD / Entra ID

Conditional Access

MAM (App Protection)

Company Portal / iOS supervision

Education

Bachelor's degree in a related field

Tools

Jamf

Apple Business Manager (ABM)

IntuneWin App Prep Tool

AD/Entra ID

Job description

Overview

We are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem for our HUD contract. IWe are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem. In this role, you will design, deploy, and maintain zero-touch device enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS devices. The ideal candidate has hands‑on technical expertise in unified endpoint management (UEM), Apple Business Manager (ABM), Windows Autopilot, and cloud‑first security baselines

This position will be located within the United States and is fully remote.

Responsibilities

Multi-Platform Device Lifecycle Management

• Configure and maintain zero-touch onboarding for all platforms: Windows Autopilot, Apple Automated Device Enrollment (ADE) via Apple Business Manager (ABM), and iOS/iPadOS enrollment
• Manage macOS configuration profiles, mobile device management (MDM) payloads, and shell scripts (Bash) for custom settings and elevated controls
• Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and Remediation scripts

Application Packaging & Deployment

• Package, test, and deploy applications across all platforms (Win32, LOB, Microsoft Store, macOS PKG/DMG files, and iOS App Store / VPP volume licensing)
• Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps

Security & Compliance

• Implement Conditional Access policies, App Protection Policies (MAM), and Compliance Policies linked with Microsoft Defender for Endpoint
• Manage disk encryption standards across platforms (BitLocker for Windows, FileVault for macOS)
• Configure identity integrations, Single Sign-On (SSO), and Platform SSO for macOS endpoints

Operational Support & Monitoring

• Act as Tier 3 escalation for endpoint-related technical issues across Windows, Mac, and mobile fleets
• Monitor tenant health, device compliance failures, sync errors, and security vulnerabilities; remediate non‑compliant assets promptly
• Maintain accurate technical documentation, enrollment guides, and end‑user self‑service instructions

Qualifications

• Bachelor's with 12+ years of system administration experience (or commensurate experience)
• 3–5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Microsoft Intune / Endpoint Manager
• Hands‑on experience integrating Apple Business Manager (ABM) with Intune, VPP app management, FileVault management, and running Bash scripts on macOS. JAMF knowledge preferred
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines
• Experience configurating iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment

Clearance Required: Ability to maintain a HUD Public Trust clearance

Posted Salary Range

USD $108,310.00 - USD $145,000.00 /Yr.

Company Overview

GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.

But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?

What You Can Expect

Interview & Hiring Process

If you are selected to move forward through the process, here’s what you can expect:

• During the Interview Process
• Virtual video interview conducted via video with the hiring manager and/or team
• Camera must be on
• A valid photo ID must be presented during each interview
• During the Hiring Process
• Enhanced Biometrics ID verification screening
• Background check, to include:
• Criminal history (past 7 years)
• Verification of your highest level of education
• Verification of your employment history (past 7 years), based on information provided in your application

Employee Perks

At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well-being, beyond the standard company offered health benefits, including:

• Employee Assistance Program (EAP)
• Corporate Discounts
• Learning & Development platform, to include certification preparation content
• Training, Education and Certification Assistance*
• Referral Bonus Program
• Internal Mobility Program
• Pet Insurance
• Flexible Work Environment

*Available to full‑time employees

Our employees’ unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.

Posted Pay Range

The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an “at‑will position” and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.