Microsoft Intune System Administrator

GovCIO; United States; On-site; USD 108,000 - 145,000; Full time

Job summary

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage and modernize a multi-platform endpoint ecosystem for a HUD contract. The role includes zero-touch enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS.

The position is located within the United States and is fully remote, offering responsibilities for device lifecycle management, application deployment, and security policy enforcement across platforms.

Qualifications

• Bachelor's degree with 12+ years of system administration experience or commensurate experience.
• 3–5+ years in Enterprise Endpoint Management, with at least 2+ years in Intune / Endpoint Manager.
• Hands-on ABM integration with Intune, VPP, FileVault, and Bash scripting on macOS; JAMF knowledge preferred.
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 packaging, and Entra ID integration.
• Strong knowledge of Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines.
• Experience configuring iOS/iPadOS devices, Supervision, MAM without enrollment, and Company Portal deployment.

Responsibilities

• Multi-Platform Device Lifecycle Management including zero-touch onboarding for Windows, macOS, and iOS/iPadOS.
• Application Packaging & Deployment across Win32, macOS PKG/DMG, and iOS App Store/VPP.
• Security & Compliance with CA policies, MAM, and Defender for Endpoint integration.
• Operational Support & Monitoring, Tier 3 escalation, and documentation upkeep.

Skills

Intune / Endpoint Manager

PowerShell scripting

RBAC

Azure AD / Entra ID

MAM / Conditional Access

Education

Bachelor's degree with 12+ years system administration

Tools

Apple Business Manager (ABM)

VPP app management

Jamf

Windows Autopilot

IntuneWin App Prep Tool

BitLocker

FileVault

Job description

We are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem for our HUD contract. I We are looking for an experienced Microsoft Intune Systems Administrator to manage and modernize our multi-platform endpoint ecosystem. In this role, you will design, deploy, and maintain zero-touch device enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS devices.

This position will be located within the United States and is fully remote.

Responsibilities

• Multi-Platform Device Lifecycle Management
  • Configure and maintain zero-touch onboarding for all platforms: Windows Autopilot, Apple Automated Device Enrollment (ADE) via Apple Business Manager (ABM), and iOS/iPadOS enrollment
  • Manage macOS configuration profiles, mobile device management (MDM) payloads, and shell scripts (Bash) for custom settings and elevated controls
  • Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and Remediation scripts
• Application Packaging & Deployment
  • Package, test, and deploy applications across all platforms (Win32, LOB, Microsoft Store, macOS PKG/DMG files, and iOS App Store / VPP volume licensing)
  • Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps
• Security & Compliance
  • Implement Conditional Access policies, App Protection Policies (MAM), and Compliance Policies linked with Microsoft Defender for Endpoint
  • Manage disk encryption standards across platforms (BitLocker for Windows, FileVault for macOS)
  • Configure identity integrations, Single Sign-On (SSO), and Platform SSO for macOS endpoints
• Operational Support & Monitoring
  • Act as Tier 3 escalation for endpoint-related technical issues across Windows, Mac, and mobile fleets
  • Monitor tenant health, device compliance failures, sync errors, and security vulnerabilities; remediate non-compliant assets promptly
  • Maintain accurate technical documentation, enrollment guides, and end-user self-service instructions

Qualifications

• Bachelor's with 12+ years of system administration experience (or commensurate experience)
• 3–5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Microsoft Intune / Endpoint Manager
• Hands-on experience integrating Apple Business Manager (ABM) with Intune, VPP app management, FileVault management, and running Bash scripts on macOS. JAMF knowledge preferred
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines
• Experience configurating iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment

Clearance Required: Ability to maintain a HUD Public Trust clearance

Posted Salary Range

USD $108,310.00 - USD $145,000.00 /Yr.