Remote Systems Administrator - Endpoint & Identity

Advanced Monitored Caregiving Inc.; Hartford (CT); On-site; USD 90,000 - 120,000; Full time

Job summary

Advanced Monitored Caregiving Inc. is seeking a Systems Administrator to manage enterprise endpoint fleet and identity platforms in a HIPAA-regulated environment. The role focuses on M365/Intune, Entra ID, and remote desktop support.

You will implement zero-touch provisioning, enforce least-privilege access, and maintain encryption and security baselines across Windows and macOS devices, supporting a distributed workforce.

Qualifications

• Working understanding of HIPAA and PHI handling in end-user computing environments.
• 3-6 years' experience in IT systems administration, including hands-on administration of Microsoft 365 and Intune.
• 3 years' experience serving as a direct technical interface to internal and external customers.
• Desktop support experience on Windows and macOS.
• Basic networking fundamentals: DNS, DHCP, TCP/IP, VPN.
• Ability to read/write PowerShell scripts; Python a plus.
• Excellent written communication and self-directed work habits.

Responsibilities

• Administers Microsoft 365 tenant services (Exchange Online, SharePoint/OneDrive, Teams).
• Owns Intune administration across Windows and macOS including enrollment, config, and compliance policies.
• Performs zero-touch provisioning with Windows Autopilot and Apple Business Manager.
• Maintains standardized device builds; reduces configuration drift.
• Manages endpoint provisioning logistics, RMAs, and secure device disposal.
• Administers Entra ID: users, groups, licensing, SSO, registrations.
• Designs and tunes Conditional Access and MFA policies.
• Manages identity lifecycle: onboarding, role changes, offboarding access revocation.
• Enforces least-privilege access across M365 and SaaS apps; conducts access reviews.
• Configures endpoint controls for HIPAA safeguards: access, logoff, auditing, encryption.
• Enforces full-disk encryption (BitLocker/FileVault) and key escrow.
• Maintains PHI data protection via DLP and device compliance policies.
• Remote lock/wipe for lost devices; assist incident responses with logs.
• Maintains security baselines; tracks vulnerabilities fleet-wide.
• Prepares documentation for HIPAA SOC 2 audits and customer questionnaires.
• Escalation point for desktop support across Windows/macOS; resolves OS/app/auth issues remotely.
• Manages service ticket queue per SLAs; communicates with non-technical staff.
• Develops and maintains SOPs, runbooks, knowledge base.
• Reads/writes PowerShell for automation; Python familiarity a plus.

Skills

M365 admin

Intune admin

Entra ID

PowerShell

macOS management

Windows management

Security & encryption

Conditional Access

Remote support

Education

MD-102

SC-300

AZ-104

Tools

Apple Business Manager

Jamf

Kandji

Autopilot

Job description

Advanced Monitored Caregiving Inc. is seeking a Systems Administrator to manage enterprise endpoint fleet and identity platforms in a HIPAA-regulated environment. The role focuses on M365/Intune, Entra ID, and remote desktop support.

You will implement zero-touch provisioning, enforce least-privilege access, and maintain encryption and security baselines across Windows and macOS devices, supporting a distributed workforce.