Remote Intune & UEM Systems Administrator (Multi-Platform)

GovCIO; Santa Fe (NM); Remote; USD 108,000 - 145,000; Full time

Benefits offered by this job

Flexible Work Environment

Training & Certification Support

Referral Bonus Program

Learning & Development resources

Employee Discounts

EAP

Job summary

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage a multi-platform endpoint environment for a HUD contract. You will design, deploy, and maintain zero-touch enrollment, configuration profiles, and compliance policies across Windows, macOS, and iOS devices.

The ideal candidate has hands-on experience with UEM, ABM, Windows Autopilot, and cloud-based security baselines, plus ABM integration with Intune and MDM workflows.

Qualifications

• Bachelor's degree or equivalent plus 12+ years in system administration.
• 3–5+ years in Enterprise Endpoint Management, with at least 2+ years in Microsoft Intune/Endpoint Manager.
• Hands-on experience integrating ABM with Intune, VPP app management, FileVault, and Bash scripting on macOS; JAMF knowledge preferred.
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 packaging (IntuneWin App Prep Tool), and AD/Entra ID integration.
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines.
• Experience configuring iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment.

Responsibilities

• Multi-Platform Device Lifecycle Management.
• Configure zero-touch onboarding for Windows Autopilot, ADE via ABM, and iOS/iPadOS enrollment.
• Manage macOS configuration profiles, MDM payloads, and Bash scripts for custom settings and elevated controls.
• Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and remediation scripts.
• Package, test, and deploy applications across Windows, macOS, and iOS platforms.
• Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps.
• Implement Conditional Access policies, App Protection Policies (MAM), and Defender for Endpoint integration.
• Manage disk encryption standards (BitLocker, FileVault).
• Configure identity integrations, SSO, and Platform SSO for macOS endpoints.
• Act as Tier 3 escalation for endpoint issues across Windows, Mac, and mobile fleets.
• Monitor tenant health, device compliance, sync errors, and vulnerabilities; remediate non-compliant assets.
• Maintain technical documentation, enrollment guides, and end-user self-service instructions.

Skills

Intune / Endpoint Manager

ABM integration

PowerShell scripting

Win32 packaging

Azure Entra ID

Conditional Access

MAM policies

BitLocker

FileVault

macOS Bash scripting

Education

Bachelor's degree in Computer Science or related field

Tools

Apple Business Manager (ABM)

Intune (Microsoft Endpoint Manager)

Jamf

Autopilot

AD/Entra ID

Job description

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage a multi-platform endpoint environment for a HUD contract. You will design, deploy, and maintain zero-touch enrollment, configuration profiles, and compliance policies across Windows, macOS, and iOS devices.

The ideal candidate has hands-on experience with UEM, ABM, Windows Autopilot, and cloud-based security baselines, plus ABM integration with Intune and MDM workflows.