Remote Microsoft Intune Systems Architect

GovCIO; Salem (OR); Remote; USD 108,000 - 145,000; Full time

Benefits offered by this job

EAP

Corporate Discounts

L&D platform

Certification assistance

Referral bonus

Internal mobility

Pet Insurance

Flexible work environment

Job summary

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage and modernize a multi-platform endpoint ecosystem for a HUD contract. You will design, deploy, and maintain zero-touch enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS devices.

The role requires hands-on expertise in unified endpoint management (UEM), ABM integration, Windows Autopilot, and cloud-first security baselines; the position is fully remote

Qualifications

• Bachelor's degree and 12+ years of system administration experience.
• 3–5+ years in Enterprise Endpoint Management; 2+ years with Microsoft Intune/Endpoint Manager.
• Hands-on experience integrating Apple Business Manager (ABM) with Intune, ABM and VPP, FileVault management, and Bash scripting on macOS (JAMF knowledge preferred).
• Experience with Windows Autopilot, BitLocker, PowerShell scripting, Win32 app packaging (IntuneWin App Prep Tool), and AD/Entra ID integration.
• Strong knowledge of Microsoft Entra ID (Azure AD), Conditional Access, RBAC, and Endpoint Security baselines.
• Experience configuring iOS/iPadOS devices, Supervision, App Protection Policies (MAM without enrollment), and Company Portal deployment.

Responsibilities

• Configure and maintain zero-touch onboarding for all platforms: Windows Autopilot, ADE via ABM, and iOS/iPadOS enrollment.
• Manage macOS configuration profiles, MDM payloads, and shell scripts for custom settings.
• Define and manage Windows baseline policies, administrative templates, PowerShell scripts, and remediation scripts.
• Package, test, and deploy applications across Win32, macOS PKG/DMG, iOS App Store / VPP.
• Maintain patching schedules and automated software update workflows for Windows, macOS, and mobile apps.
• Implement Conditional Access policies, App Protection Policies, and Defender for Endpoint integration.
• Manage disk encryption standards (BitLocker, FileVault) and identity integrations with SSO for macOS.
• Act as Tier 3 escalation for endpoint issues; monitor health, compliance, and vulnerabilities; maintain end-user documentation.

Skills

Endpoint Management

Microsoft Intune

PowerShell scripting

Windows Autopilot

ABM integration

Azure AD / Entra ID

Conditional Access

RBAC

Jamf knowledge

MDM configuration

Education

Bachelor's degree in a relevant field

Tools

Jamf

Apple Business Manager

Microsoft Defender for Endpoint

Job description

GovCIO is seeking an experienced Microsoft Intune Systems Administrator to manage and modernize a multi-platform endpoint ecosystem for a HUD contract. You will design, deploy, and maintain zero-touch enrollment, configuration profiles, compliance policies, and app packaging across Windows, macOS, and iOS/iPadOS devices.

The role requires hands-on expertise in unified endpoint management (UEM), ABM integration, Windows Autopilot, and cloud-first security baselines; the position is fully remote