SCCM / Intune / Windows Administrator (L3)

Cognizant; Des Moines (IA); Hybrid; USD 49,000 - 92,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is hiring for a Hybrid Des Moines-based role focusing on Endpoint Management and Security for corporate endpoints. The position requires experience with SCCM/MECM, Intune, Autopilot, and Windows administration, with a strong emphasis on compliance and vulnerability remediation.

Responsibilities span administration, deployment, patch management, security controls, scripting, and governance. This role operates in a 24x7 managed services setting and reports to the Cognizant security/IT

Qualifications

• Experience in endpoint management and modern device management solutions.
• Experience with SCCM/MECM and Intune environments.
• Strong knowledge of Windows 10/11 administration and security baselines.

Responsibilities

• Administer and support Microsoft Intune and SCCM/MECM environments.
• Manage device enrollment, provisioning, and lifecycle for corporate endpoints.
• Implement Autopilot deployments and modern device management solutions.
• Configure and manage endpoint security policies and compliance standards.
• Resolve SCCM/Intune issues and perform RCA for incidents.
• Develop PowerShell scripts for automation and dashboards.
• Maintain runbooks, SOPs, and documentation.

Skills

Endpoint Management

Windows Administration

Security & Compliance

Scripting & Automation

ITSM & Operations

Communication & Stakeholders

Tools

SCCM/MECM

Microsoft Intune

Microsoft Endpoint Manager

Windows Autopilot

Co-Management

Active Directory

Group Policy

Defender for Endpoint

Job description

Experience 5-10 Years

Location: Des Moines, IA - Hybrid (3 days work from office)

Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

Key Responsibilities

Endpoint Management

• Administer and support Microsoft Intune and SCCM/MECM environments.
• Manage device enrollment, provisioning, and lifecycle management for corporate endpoints.
• Implement and maintain Autopilot deployments and modern device management solutions.
• Configure and manage compliance policies, configuration profiles, and endpoint security policies.

Software Deployment & Patch Management

• Package, deploy, and maintain enterprise applications using SCCM and Intune.
• Manage OS and third-party patch deployment across enterprise endpoints.
• Perform patch compliance reporting and remediation activities.
• Monitor software distribution and application deployment success rates.
• Windows Administration
• Administer and support Windows 10 and Windows 11 environments.
• Manage operating system upgrades, feature updates, and migration projects.
• Troubleshoot operating system, performance, and endpoint-related issues.
• Maintain Windows security baselines and compliance standards.
• Endpoint Security & Compliance
• Implement endpoint security controls and vulnerability remediation programs.
• Work closely with security teams to remediate vulnerabilities within SLA.
• Support Microsoft Defender, BitLocker, Defender for Endpoint, and related security technologies.
• Ensure compliance with organizational and regulatory security requirements. Infrastructure & Troubleshooting
• Diagnose and resolve SCCM client, Intune enrollment, application deployment and Windows device issues.
• Perform root cause analysis (RCA) for recurring incidents.
• Support enterprise endpoint infrastructure, distribution points, and management points.
• Handle escalations and provide L3 technical support.

Automation & Reporting

• Develop PowerShell scripts for administration and automation.
• Generate operational dashboards, compliance reports, and executive status reports.
• Monitor endpoint health and service performance metrics.

Documentation & Governance

• Maintain operational runbooks, SOPs, and technical documentation.
• Support audit requests and compliance reviews.
• Participate in change, incident, problem, and release management processes.

Required Technical Skills

Endpoint Management

• Microsoft Endpoint Configuration Manager (SCCM/MECM)
• Microsoft Intune
• Microsoft Endpoint Manager
• Windows Autopilot
• Co-Management

Windows Administration

• Windows 10 / Windows 11 Administration
• Active Directory
• Group Policy Administration
• Windows Security & Hardening

Security & Compliance

• Microsoft Defender for Endpoint
• BitLocker
• Endpoint Security Policies
• Vulnerability Remediation

Scripting & Automation

• PowerShell
• Windows Automation Scripts

ITSM & Operations

• ServiceNow / ITSM Platforms
• Incident, Change & Problem Management
• Root Cause Analysis (RCA)

Preferred Skills

• Azure AD / Entra ID
• Microsoft 365 Administration
• Windows Virtual Desktop / Azure Virtual Desktop
• Cloud device management
• Endpoint Analytics
• Zero Trust Security Concepts

Key Competencies

• Strong troubleshooting and problem-solving skills
• Customer-focused service orientation
• Excellent communication and stakeholder management
• Ability to work in a 24x7 managed services environment
• Experience working within SLAs and governance processes

Applications will be accepted until 10/15/2026

The annual salary for this position is between $49,001- $92,000 depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans.

Benefits

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contribution
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

#CB #IND123