SCCM / Intune / Windows Administrator (L3)

Cognizant; Des Moines (IA); Hybrid; USD 49,000 - 92,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays and PTO

401(k) plan and employer contribution

Disability coverage

Parental leave

Job summary

Cognizant is seeking a Sr. SCCM / Intune / Windows Administrator (L3) for a Des Moines, IA hybrid role. You will manage enterprise endpoints, deploy Autopilot, enforce security baselines, and support Windows 10/11 across the organization.

This position requires 5–10 years of experience in endpoint management and strong scripting capabilities using PowerShell. Responsibilities include configuring policy and compliance, handling incident escalations, and working with security teams to remediate

Qualifications

• 5–10 years of experience in endpoint management and Windows admin areas.
• Hands-on experience with Intune and SCCM/MECM in large enterprises.
• Scripting with PowerShell and familiarity with automation concepts.
• Strong understanding of security baselines, policies, and compliance.

Responsibilities

• Administer and support Microsoft Intune and SCCM/MECM environments.
• Manage device enrollment, provisioning, and lifecycle for corporate endpoints.
• Implement Autopilot deployments and modern device management solutions.
• Configure and manage endpoint security policies and compliance profiles.
• Administer Windows 10/11 environments and perform OS upgrades and migrations.
• Troubleshoot OS, performance, and endpoint-related issues; maintain security baselines.
• Develop PowerShell scripts for automation and monitoring; build dashboards.

Skills

SCCM/MECM

Intune

PowerShell

Azure AD

Windows 10/11

Group Policy

Security policies

ITSM

Change management

Tools

ServiceNow

Intune

Windows Autopilot

Job description

SCCM / Intune / Windows Administrator (L3)

Experience 5-10 Years

Location: Des Moines, IA - Hybrid (3 days work from office)

Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

Key Responsibilities

Endpoint Management

• Administer and support Microsoft Intune and SCCM/MECM environments.
• Manage device enrollment, provisioning, and lifecycle management for corporate endpoints.
• Implement and maintain Autopilot deployments and modern device management solutions.
• Configure and manage compliance policies, configuration profiles, and endpoint security policies.

Windows Administration

• Administer and support Windows 10 and Windows 11 environments.
• Manage operating system upgrades, feature updates, and migration projects.
• Troubleshoot operating system, performance, and endpoint-related issues.
• Maintain Windows security baselines and compliance standards.

Endpoint Security & Compliance

• Implement endpoint security controls and vulnerability remediation programs.
• Work closely with security teams to remediate vulnerabilities within SLA.
• Support Microsoft Defender, BitLocker, Defender for Endpoint, and related security technologies.

Infrastructure & Troubleshooting

• Diagnose and resolve SCCM client, Intune enrollment, application deployment, and Windows device issues.
• Perform root cause analysis (RCA) for recurring incidents.
• Support enterprise endpoint infrastructure, distribution points, and management points.
• Handle escalations and provide L3 technical support.

Automation & Reporting

• Develop PowerShell scripts for administration and automation.
• Generate operational dashboards, compliance reports, and executive status reports.
• Monitor endpoint health and service performance metrics.

Documentation & Governance

• Maintain operational runbooks, SOPs, and technical documentation.
• Support audit requests and compliance reviews.
• Participate in change, incident, problem, and release management processes.

Required Technical Skills

Endpoint Management

• Microsoft Endpoint Configuration Manager (SCCM/MECM)
• Microsoft Intune
• Microsoft Endpoint Manager
• Windows Autopilot
• Co-Management

Windows Administration

• Windows 10 / Windows 11 Administration
• Active Directory
• Group Policy Administration
• Windows Security & Hardening

Security & Compliance

• Microsoft Defender for Endpoint
• BitLocker
• Endpoint Security Policies
• Vulnerability Remediation

Scripting & Automation

• PowerShell
• Windows Automation Scripts

ITSM & Operations

• ServiceNow / ITSM Platforms
• Incident, Change & Problem Management
• Root Cause Analysis (RCA)

Preferred Skills

• Azure AD / Entra ID
• Microsoft 365 Administration
• Windows Virtual Desktop / Azure Virtual Desktop
• Cloud device management
• Endpoint Analytics
• Zero Trust Security Concepts

Key Competencies

• Strong troubleshooting and problem-solving skills
• Customer-focused service orientation
• Excellent communication and stakeholder management
• Ability to work in a 24x7 managed services environment
• Experience working within SLAs and governance processes

Applications will be accepted until 8/31/2026

The annual salary for this position is between $49,001- $92,000 depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

#CB

#IND123