Windows Administrator
Cognizant
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
Cognizant in Des Moines, IA is hiring an experienced SCCM/Intune/Windows Administrator (L3) to support enterprise endpoint management, modern workplace initiatives, endpoint security, and Windows platform administration.
The role focuses on maintaining SCCM/MECM and Intune environments, device enrollment and lifecycle, patch management, and security compliance, with PowerShell automation and ITSM collaboration.
Qualifications
- 8+ years of experience supporting enterprise Windows environments.
- Strong hands-on expertise in SCCM/MECM administration and Microsoft Intune.
- Experience managing enterprise endpoint deployments, patching, and compliance programs.
- Experience supporting large-scale Windows migration and modernization projects.
- Knowledge of ITIL Service Management practices.
- Experience working within managed services and SLA-driven environments.
- Proven experience supporting enterprise endpoint security initiatives.
Responsibilities
- Administer, maintain, and optimize Microsoft Intune and SCCM/MECM environments for enterprise endpoint management.
- Manage device enrollment, provisioning, imaging, deployment, and lifecycle activities across Windows endpoints.
- Implement and support Windows Autopilot and modern device management solutions.
- Configure compliance policies, configuration profiles, device restrictions, and endpoint governance standards.
- Manage co-management environments integrating SCCM and Intune.
- Monitor endpoint posture and ensure adherence to organizational technology standards.
- Package, test, deploy, and support enterprise applications using SCCM and Intune.
- Manage deployment of operating system patches, cumulative updates, feature updates, and third‑party software patches.
- Monitor software distribution performance and deployment success metrics.
- Perform patch compliance reporting and remediation activities.
- Ensure endpoint systems remain compliant with security and operational standards.
- Coordinate patching schedules and maintenance windows with business and infrastructure teams.
- Support and administer Windows 10 and Windows 11 enterprise environments.
- Manage OS migrations, feature upgrades, image maintenance, and deployment strategies.
- Troubleshoot Windows operating system issues related to performance, reliability, and user experience.
- Administer Active Directory integration and Group Policy configurations.
- Maintain Windows security baselines and hardening standards.
- Support endpoint performance optimization initiatives and system lifecycle planning.
- Implement and maintain endpoint security controls aligned with enterprise security policies.
- Support Microsoft Defender for Endpoint, BitLocker encryption, and endpoint protection technologies.
- Conduct vulnerability assessments and coordinate remediation activities.
- Partner with cybersecurity teams to address security findings and policy compliance gaps.
- Ensure regulatory, audit, and organizational compliance requirements are met.
- Support Zero Trust and endpoint security initiatives.
- Diagnose and resolve complex SCCM client, Intune enrollment, software deployment, and endpoint configuration issues.
- Support enterprise endpoint infrastructure including management points, distribution points, software update points, and related services.
- Perform root cause analysis (RCA) for recurring incidents and service disruptions.
- Act as an L3 escalation point for critical endpoint management issues.
- Collaborate with server, network, cloud, and security teams to ensure seamless endpoint operations.
- Maintain system stability and improve endpoint service availability.
- Develop, maintain, and enhance PowerShell scripts for automation and operational efficiency.
- Automate routine administration, health checks, reporting, and remediation activities.
- Build operational dashboards and executive reporting metrics.
- Monitor endpoint health, deployment performance, compliance status, and service quality metrics.
- Identify opportunities to reduce manual effort through process automation and standardization.
- Maintain runbooks, SOPs, and technical documentation.
- Support audit activities and compliance reviews.
- Participate in Incident, Change, Problem, Release, and Configuration Management processes.
- Ensure all activities comply with ITIL and organizational governance standards.
- Maintain accurate records for system configurations, deployments, and operational changes.
Skills
Tools
Job description
Job Title: SCCM/ Intune/ Windows Administrator (L3)
Job Location: Hybrid- Des Moines, IA, USA.
** Please note, this role is not able to offer visa transfer or sponsorship now or in the future
We are seeking an experienced SCCM / Intune / Windows Administrator (L3) to support enterprise endpoint management, modern workplace initiatives, endpoint security, and Windows platform administration. The ideal candidate will possess strong expertise in Microsoft Endpoint Configuration Manager (SCCM/MECM), Microsoft Intune, Windows 10/11 administration, endpoint security technologies, and PowerShell automation.
This role will be responsible for maintaining endpoint health, software deployment services, device lifecycle management, compliance enforcement, vulnerability remediation, and advanced troubleshooting within a large-scale enterprise environment.
In this role, you will
- Administer, maintain, and optimize Microsoft Intune and SCCM/MECM environments for enterprise endpoint management.
- Manage device enrollment, provisioning, imaging, deployment, and lifecycle activities across Windows endpoints.
- Implement and support Windows Autopilot and modern device management solutions.
- Configure compliance policies, configuration profiles, device restrictions, and endpoint governance standards.
- Manage co-management environments integrating SCCM and Intune.
- Monitor endpoint posture and ensure adherence to organizational technology standards.
- Package, test, deploy, and support enterprise applications using SCCM and Intune.
- Manage deployment of operating system patches, cumulative updates, feature updates, and third‑party software patches.
- Monitor software distribution performance and deployment success metrics.
- Perform patch compliance reporting and remediation activities.
- Ensure endpoint systems remain compliant with security and operational standards.
- Coordinate patching schedules and maintenance windows with business and infrastructure teams.
- Support and administer Windows 10 and Windows 11 enterprise environments.
- Manage OS migrations, feature upgrades, image maintenance, and deployment strategies.
- Troubleshoot Windows operating system issues related to performance, reliability, and user experience.
- Administer Active Directory integration and Group Policy configurations.
- Maintain Windows security baselines and hardening standards.
- Support endpoint performance optimization initiatives and system lifecycle planning.
- Implement and maintain endpoint security controls aligned with enterprise security policies.
- Support Microsoft Defender for Endpoint, BitLocker encryption, and endpoint protection technologies.
- Conduct vulnerability assessments and coordinate remediation activities.
- Partner with cybersecurity teams to address security findings and policy compliance gaps.
- Ensure regulatory, audit, and organizational compliance requirements are met.
- Support Zero Trust and endpoint security initiatives.
- Diagnose and resolve complex SCCM client, Intune enrollment, software deployment, and endpoint configuration issues.
- Support enterprise endpoint infrastructure including management points, distribution points, software update points, and related services.
- Perform root cause analysis (RCA) for recurring incidents and service disruptions.
- Act as an L3 escalation point for critical endpoint management issues.
- Collaborate with server, network, cloud, and security teams to ensure seamless endpoint operations.
- Maintain system stability and improve endpoint service availability.
- Develop, maintain, and enhance PowerShell scripts for automation and operational efficiency.
- Automate routine administration, health checks, reporting, and remediation activities.
- Build operational dashboards and executive reporting metrics.
- Monitor endpoint health, deployment performance, compliance status, and service quality metrics.
- Identify opportunities to reduce manual effort through process automation and standardization.
- Maintain runbooks, standard operating procedures (SOPs), and technical documentation.
- Support audit activities and compliance reviews.
- Participate in Incident, Change, Problem, Release, and Configuration Management processes.
- Ensure all activities comply with ITIL and organizational governance standards.
- Maintain accurate records for system configurations, deployments, and operational changes.
- Microsoft Endpoint Configuration Manager (SCCM/MECM)
- Microsoft Intune
- Microsoft Endpoint Manager
- Windows Autopilot
- Co‑Management Architecture
- Device Enrollment & Lifecycle Management
- Windows 10 Administration
- Windows 11 Administration
- Active Directory
- Group Policy Administration
- Windows Security Hardening
- Endpoint Configuration Management
- Microsoft Defender for Endpoint
- BitLocker Administration
- Endpoint Protection Policies
- Vulnerability Management
- Security Baselines
- Compliance Reporting
- PowerShell Scripting
- Windows Automation Frameworks
- Task Automation
- Operational Reporting Automation
- ServiceNow or other Enterprise ITSM Platforms
- Incident Management
- Change Management
- Problem Management
- Release Management
- Root Cause Analysis (RCA)
- SLA Management
What you’ll need to succeed (required skills)
- 8+ years of experience supporting enterprise Windows environments.
- Strong hands‑on expertise in SCCM/MECM administration and Microsoft Intune.
- Experience managing enterprise endpoint deployments, patching, and compliance programs.
- Experience supporting large‑scale Windows migration and modernization projects.
- Knowledge of ITIL Service Management practices.
- Experience working within managed services and SLA‑driven environments.
- Proven experience supporting enterprise endpoint security initiatives.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long‑term/Short‑term Disability
Paid Parental Leave
Employee Stock Purchase Plan
Work model:
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work‑life balance though our various wellbeing programs. Based on this role’s business requirements, this is a hybrid role requiring 3 days a week at client site in Des Moines, IA, USA.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
“Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
