Senior Microsoft Identity & Endpoint Administrator

Union-Community-Care; Lancaster (Lancaster County); On-site; USD 90,000 - 120,000; Full time

Job summary

Union Community Care is seeking a seasoned tech­nician with hands-on expertise in Microsoft identity, endpoint, and cloud administration to manage our hybrid environment. The role focuses on AD, GPOs, M365, Azure tenant operations, Intune/MDM, identity governance, and security controls.

The ideal candidate solves problems pragmatically, designs and troubleshoots complex Microsoft-centric infrastructure, and collaborates with security, networking, and operations teams.

Qualifications

• 5+ years of hands-on experience administering Active Directory and Group Policy in production environments.
• Experience managing Microsoft 365 tenants and Azure AD / Entra ID (including hybrid identity).
• Proficient in PowerShell scripting to automate AD, Entra ID, M365, and Intune tasks.
• Experience with Microsoft Intune / Endpoint Manager and MDM.

Responsibilities

• Administer and maintain on-premises Active Directory domains and GPOs.
• Design, test, deploy, and troubleshoot GPO configurations for security baselines and software deployment.
• Write and optimize PowerShell scripts for automation across AD, Entra ID, M365, and Intune tasks.
• Manage Microsoft 365 tenants: Exchange Online, SharePoint Online, Teams, OneDrive, and licensing.
• Administer Azure AD / Entra ID users, groups, app registrations, and conditional access.
• Own Intune / Endpoint Manager and MDM operations: enrollment, profiles, compliance, Autopilot.
• Support identity lifecycle management, SSO, MFA, and passwordless initiatives.
• Implement and monitor DLP policies across Microsoft 365.
• Collaborate with security, networking, and operations teams on identity and endpoint projects.
• Document configurations, runbooks, and participate in change management.

Skills

Active Directory

Group Policy

PowerShell

Azure AD / Entra ID

Intune / Endpoint Manager

MDM

Conditional access

MFA

Data Loss Prevention (DLP)

Cybersecurity best practices

Troubleshooting complex issues

End-user / admin communication

Tools

Microsoft Defender

Microsoft Sentinel

AD CS / PKI

Entra ID

Job description

Union Community Care is seeking a seasoned tech­nician with hands-on expertise in Microsoft identity, endpoint, and cloud administration to manage our hybrid environment. The role focuses on AD, GPOs, M365, Azure tenant operations, Intune/MDM, identity governance, and security controls.

The ideal candidate solves problems pragmatically, designs and troubleshoots complex Microsoft-centric infrastructure, and collaborates with security, networking, and operations teams.