Remote Systems Administrator: Endpoint & Identity Security

Advanced Monitored Caregiving Inc.; Columbia (SC); On-site; USD 90,000 - 120,000; Full time

Job summary

Advanced Monitored Caregiving Inc. is seeking a Systems Administrator to manage the enterprise endpoint fleet and identity platform in a HIPAA-regulated environment.

You will administer Microsoft 365 and Intune, Entra ID, and oversee Windows and macOS device management, security controls, and documentation. This fully remote role requires hands-on experience with Autopilot, Apple Business Manager, and compliance practices, plus strong written communication.

Qualifications

• 3–6 years' experience in IT systems administration, including hands-on administration of Microsoft 365 and Microsoft Intune in a production environment.
• Direct technical interface to internal and external customers.
• Desktop support experience on Windows and macOS.
• Working knowledge of networking fundamentals (DNS, DHCP, TCP/IP, VPN).
• Ability to read and write PowerShell scripts for administrative automation.
• Excellent written communication and self-directed work habits.

Responsibilities

• Administers Microsoft 365 tenant services, including Exchange Online, SharePoint/OneDrive, and Teams.
• Owns Microsoft Intune administration across Windows and macOS, including device enrollment, configuration and compliance policies, application deployment, patch rings, and update management.
• Performs zero-touch provisioning through Windows Autopilot and Apple Business Manager so that endpoints ship directly to remote employees and are production-ready at first login.
• Maintains standardized, reproducible device builds and reduces configuration drift across the fleet.
• Coordinates endpoint hardware logistics with vendors and depot partners, including procurement, drop-shipping, RMAs, and the secure return or disposal of devices from departing employees.
• Administers Entra ID, including users, groups, roles, licensing, SSO integrations, and application registrations.
• Designs, tests, deploys, and tunes Conditional Access and multi-factor authentication policies.
• Executes identity lifecycle management, including automated onboarding, role changes, and same-day access revocation at offboarding.
• Enforces least-privilege and role-based access across Microsoft 365 and integrated SaaS applications, and conducts periodic access reviews and user access recertification.
• Configures and maintains endpoint controls supporting HIPAA Security Rule safeguards, including access control, automatic logoff, audit logging, and encryption.
• Enforces full-disk encryption on all endpoints (BitLocker and FileVault) and manages key escrow and recovery.
• Maintains data loss prevention and device compliance policies that keep Protected Health Information (PHI) on managed, compliant devices.
• Executes remote lock and wipe for lost, stolen, or compromised devices, and supports incident response and breach investigation with device and access log evidence.
• Applies and maintains endpoint security baselines, and tracks and remediates vulnerability findings across the fleet.
• Maintains documentation and produces evidence for HIPAA audits, risk assessments, SOC 2 reviews, and customer security questionnaires.
• Ensures the rigorous application of Information Security/Information Assurance policies, principles, and practices in the delivery of systems, applications, and services.
• Serves as the escalation point for advanced desktop support across Windows and macOS, including operating system, application, authentication, VPN, network connectivity, printing, and hardware issues, all diagnosed remotely.
• Manages the support ticket queue against defined service level agreements and communicates clearly with non-technical staff, primarily in writing.
• Develops and maintains standard operating procedures, runbooks, internal documentation, and end-user knowledge base articles.
• Reads and writes PowerShell scripts to automate repetitive administrative work. Python is nice to have but not required.
• Tracks hardware, software, and license inventory across the full asset lifecycle.
• Interfaces with internal and external Network Engineers, Security, and Application teams to optimize systems use and configuration.
• Provides technical knowledge and recommendations to staff members as required.
• Some after-hours work will be required for maintenance, patching, and incident response.
• Performs other related duties as assigned.

Skills

Microsoft 365

Intune administration

Entra ID

PowerShell scripting

Python (optional)

End-user support

Education

Microsoft MD-102 (Endpoint Administrator Associate)

Microsoft SC-300

Microsoft AZ-104

Apple Certified Support Professional

Tools

Windows Autopilot

Apple Business Manager

Jamf

Kandji

Job description

Advanced Monitored Caregiving Inc. is seeking a Systems Administrator to manage the enterprise endpoint fleet and identity platform in a HIPAA-regulated environment.

You will administer Microsoft 365 and Intune, Entra ID, and oversee Windows and macOS device management, security controls, and documentation. This fully remote role requires hands-on experience with Autopilot, Apple Business Manager, and compliance practices, plus strong written communication.