Senior Windows & Endpoint Admin: Patching, Security & Automation

fletchergroupautomation; Franklin (TN); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

100% paid medical, dental, and vision

Paid time off including vacation, sick

401(k) with company match

Bonuses

Job summary

The State Group is seeking a Senior Systems & Endpoint Administrator to join our Franklin, Tennessee team. You will manage and optimize endpoint management systems, oversee patching, and maintain secure Windows Server environments while ensuring compliance with CIS Benchmarks and security standards.

Top candidates will have 5+ years of enterprise Windows administration, experience with ManageEngine, and strong scripting/automation skills to improve efficiency and security.

Qualifications

• 5+ years of systems administration experience supporting enterprise Windows environments.
• Strong hands‑on expertise with Windows Server administration, endpoint management, enterprise patching, and vulnerability remediation.
• Experience with ManageEngine or a similar endpoint management platform, including patch scheduling, testing, deployment, and compliance reporting.
• Working knowledge of BitLocker, CIS Benchmarks, security hardening, configuration management, and IT asset lifecycle management.
• Strong troubleshooting, analytical, documentation, and stakeholder communication skills.
• Experience with Microsoft Intune, modern endpoint management, workstation imaging, security audits, vulnerability management programs, or regulatory compliance initiatives is preferred.
• Microsoft, security, or infrastructure certifications are preferred.

Responsibilities

• Manage and optimize ManageEngine for patching, endpoint management, asset tracking, compliance monitoring, and reporting.
• Oversee patch deployment and maintenance for Windows servers, workstations, and mobile devices.
• Support and maintain secure, reliable Windows Server and endpoint environments.
• Administer BitLocker encryption, recovery keys, CIS Benchmark security baselines, and endpoint security controls.
• Manage the full IT asset lifecycle, from deployment through retirement and secure disposal.
• Troubleshoot and resolve vulnerabilities, patch failures, system conflicts, performance issues, and endpoint incidents.
• Develop automation, standards, procedures, reporting, and remediation strategies to improve operational efficiency and security.
• Partner with technical and business teams to support compliance, security, and continuous improvement initiatives.

Skills

Windows Server

Endpoint management

ManageEngine

BitLocker

CIS Benchmarks

Security hardening

Vulnerability remediation

Intune

Regulatory compliance

Documentation

Education

Bachelor’s degree or equivalent experience

Tools

ManageEngine

Microsoft Intune

BitLocker

Job description

The State Group is seeking a Senior Systems & Endpoint Administrator to join our Franklin, Tennessee team. You will manage and optimize endpoint management systems, oversee patching, and maintain secure Windows Server environments while ensuring compliance with CIS Benchmarks and security standards.

Top candidates will have 5+ years of enterprise Windows administration, experience with ManageEngine, and strong scripting/automation skills to improve efficiency and security.