SCCM / Intune / Windows Administrator (L3)

Cognizant; Des Moines (IA); Hybrid; USD 49,000 - 92,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a SCCM / Intune / Windows Administrator (L3) in Des Moines, IA, a hybrid role with 3 days in the office. The candidate will manage endpoint management, software deployment, and Windows OS upgrades for enterprise devices.

Responsibilities include configuring security policies, automating with PowerShell, ITSM incident handling, and governance documentation. Experience 5–10 years preferred; visa sponsorship not available.

Qualifications

• Experience with Microsoft Endpoint Configuration Manager (SCCM/MECM) and Intune in large enterprises.
• Proficient in Windows 10/11 administration and OS upgrades.
• Strong knowledge of security baselines, Defender for Endpoint, BitLocker, and policy enforcement.

Responsibilities

• Administer and support SCCM/MECM and Intune environments.
• Manage device enrollment, autopilot deployments, and lifecycle management.
• Configure and enforce security/configuration policies and compliance standards.

Skills

SCCM/MECM

Intune

Windows Autopilot

PowerShell

AD/GP

Defender for Endpoint

EndUser MDM

Azure AD

Tools

ServiceNow

ITSM Platforms

Job description

SCCM / Intune / Windows Administrator (L3)

Experience 5-10 Years

Location: Des Moines, IA - Hybrid (3 days work from office)

Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

Key Responsibilities

Endpoint Management

• Administer and support Microsoft Intune and SCCM/MECM environments.
• Manage device enrollment, provisioning, and lifecycle management for corporate endpoints.
• Implement and maintain Autopilot deployments and modern device management solutions.
• Configure and manage compliance policies, configuration profiles, and endpoint security policies.

Software Deployment & Patch Management

• Package, deploy, and maintain enterprise applications using SCCM and Intune.
• Manage OS and third-party patch deployment across enterprise endpoints.
• Perform patch compliance reporting and remediation activities.
• Monitor software distribution and application deployment success rates.

Windows Administration

• Administer and support Windows 10 and Windows 11 environments.
• Manage operating system upgrades, feature updates, and migration projects.
• Troubleshoot operating system, performance, and endpoint-related issues.
• Maintain Windows security baselines and compliance standards.

Endpoint Security & Compliance

• Implement endpoint security controls and vulnerability remediation programs.
• Work closely with security teams to remediate vulnerabilities within SLA.
• Support Microsoft Defender, BitLocker, Defender for Endpoint, and related security technologies.
• Ensure compliance with organizational and regulatory security requirements.

Infrastructure & Troubleshooting

• Diagnose and resolve SCCM client, Intune enrollment, application deployment, and Windows device issues.
• Perform root cause analysis (RCA) for recurring incidents.
• Support enterprise endpoint infrastructure, distribution points, and management points.
• Handle escalations and provide L3 technical support.

Automation & Reporting

• Develop PowerShell scripts for administration and automation.
• Generate operational dashboards, compliance reports, and executive status reports.
• Monitor endpoint health and service performance metrics.

Documentation & Governance

• Maintain operational runbooks, SOPs, and technical documentation.
• Support audit requests and compliance reviews.
• Participate in change, incident, problem, and release management processes.

Required Technical Skills

Endpoint Management

• Microsoft Endpoint Configuration Manager (SCCM/MECM)
• Microsoft Intune
• Microsoft Endpoint Manager
• Windows Autopilot
• Co-Management

Windows Administration

• Windows 10 / Windows 11 Administration
• Active Directory
• Group Policy Administration
• Windows Security & Hardening

Security & Compliance

• Microsoft Defender for Endpoint
• BitLocker
• Endpoint Security Policies
• Vulnerability Remediation

Scripting & Automation

• PowerShell
• Windows Automation Scripts

ITSM & Operations

• ServiceNow / ITSM Platforms
• Incident, Change & Problem Management
• Root Cause Analysis (RCA)

Preferred Skills

• Azure AD / Entra ID
• Microsoft 365 Administration
• Windows Virtual Desktop / Azure Virtual Desktop
• Cloud device management
• Endpoint Analytics
• Zero Trust Security Concepts

Key Competencies

• Strong troubleshooting and problem-solving skills
• Customer-focused service orientation
• Excellent communication and stakeholder management
• Ability to work in a 24x7 managed services environment
• Experience working within SLAs and governance processes

Applications will be accepted until 8/31/2026

The annual salary for this position is between $49,001- $92,000 depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contribution
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.