Remote Microsoft Intune Systems Administrator (UEM)

GovCIO; Cheyenne (WY); Remote; USD 108,000 - 145,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage a multi‑platform endpoint environment from a remote location in the United States. You will design zero‑touch enrollment, configure ABM integration, and maintain security baselines across Windows, macOS, and iOS devices.

The role requires hands‑on expertise with ABM, Intune, Windows Autopilot, BitLocker, FileVault, and scripting. This remote, HUD contract position offers meaningful impact and competitive pay.

Qualifications

• Bachelor's degree with 12+ years of system administration experience, or commensurate experience.
• 3–5+ years in Enterprise Endpoint Management, with at least 2+ years dedicated to Microsoft Intune / Endpoint Manager.
• Hands‑on experience integrating Apple Business Manager (ABM) with Intune, VPP app management, FileVault management, and running Bash scripts on macOS. JAMF knowledge preferred.
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration.
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines.
• Experience configurating iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment.

Responsibilities

• Configure and maintain zero-touch onboarding for all platforms: Windows Autopilot, ADE via ABM, and iOS/iPadOS enrollment.
• Manage macOS configuration profiles, MDM payloads, and shell scripts (Bash) for custom settings and elevated controls.
• Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and Remediation scripts.
• Package, test, and deploy applications across all platforms (Win32, LOB, Microsoft Store, macOS PKG/DMG files, and iOS App Store / VPP volume licensing).
• Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps.
• Implement Conditional Access policies, App Protection Policies (MAM), and Compliance Policies linked with Microsoft Defender for Endpoint.
• Manage disk encryption standards across platforms (BitLocker for Windows, FileVault for macOS).
• Configure identity integrations, Single Sign-On (SSO), and Platform SSO for macOS endpoints.
• Act as Tier 3 escalation for endpoint-related technical issues across Windows, Mac, and mobile fleets.
• Monitor tenant health, device compliance failures, sync errors, and security vulnerabilities; remediate non‑compliant assets promptly.
• Maintain accurate technical documentation, enrollment guides, and end‑user self‑service instructions.

Skills

Intune / Endpoint Manager

Apple Business Manager (ABM)

Windows Autopilot

MDM / device enrollment

PowerShell scripting

Azure AD / Entra ID

Endpoint security baselines

Education

Bachelor's degree

Tools

JAMF

IntuneWin App Prep Tool

Win32 packaging

Job description

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage a multi‑platform endpoint environment from a remote location in the United States. You will design zero‑touch enrollment, configure ABM integration, and maintain security baselines across Windows, macOS, and iOS devices.

The role requires hands‑on expertise with ABM, Intune, Windows Autopilot, BitLocker, FileVault, and scripting. This remote, HUD contract position offers meaningful impact and competitive pay.