Workplace Administrator

Darling Ingredients Inc.; Irving (TX); Hybrid; USD 85,000 - 125,000; Full time

Job summary

Darling Ingredients Inc. seeks an experienced IT professional to manage enterprise endpoint devices and virtual desktop environments in a global, hybrid cloud-first setup.

You will administer Intune, MECM/SCCM, Entra ID, and AVD, ensure patching, asset lifecycle management, and provide Tier-2/3 escalation support while aligning with zero-trust principles. This role emphasizes security, compliance reporting, and collaboration across teams.

Qualifications

• Bachelor's degree in IS/CS or equivalent practical experience.
• 3+ years in enterprise endpoint administration with Intune, MECM/SCCM, Entra ID.
• Proficient PowerShell for admin tasks and scripting.
• Experience with Azure Virtual Desktop (AVD) or similar VDI.
• Experience with Idira/Cyberark EPM or PAM solutions.
• Strong Windows 10/11, Autopilot knowledge.

Responsibilities

• Manage and support enterprise endpoint devices and VDI across a global hybrid setup.
• Administer Intune, MECM/SCCM, Entra ID configurations and policy compliance.
• Monitor health, enrollment, and policy compliance for hybrid and cloud endpoints.
• Patch, package, and deploy Win32/MSIX/web apps via Patch My PC and MECM.
• Provide Tier-2/3 escalation for endpoint issues and document resolutions.
• Follow ITSM processes in ServiceNow and maintain SOPs.

Skills

Microsoft Intune

MECM/SCCM

Entra ID / AD

PowerShell

Azure Virtual Desktop

PAM / EPM

Education

Bachelor's Degree in Information Systems or Computer Science

Tools

Idira/Cyberark PAM

Azure Virtual Desktop

Microsoft Intune

Job description

We're one of the world's leading practitioners of circularity, transforming materials from the animal agriculture and food industries into valuable ingredients. Ingredients that nourish people, feed animals and crops, and fuel the world with renewable energy.

This position is responsible for the day-to-day administration, operational support, maintenance, and security enforcement of enterprise endpoint devices and virtual desktop environments across a global, hybrid, cloud-first infrastructure. This role focuses on operational excellence, system availability, asset lifecycle management, and user-facing technical support escalation.

Essential Duties/Responsibilities

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.

• Executes daily device management tasks across the Workplace portfolio of services using technologies such as but not limited to Microsoft Intune, MECM/SCCM co-management, Azure Virtual Desktop (AVD), and Idira/Cyberark Privileged Access Management (PAM) / Endpoint Privilege Manager (EPM)
• Works closely with Service Desk teams, Infrastructure Engineers, and Information Security personnel, the administrator ensures consistent patch compliance, seamless software packaging and distribution, robust asset tracking, and rapid resolution of endpoint-related incidents
• Administers and maintains enterprise endpoint management platforms across Microsoft Intune, MECM/SCCM, and Entra ID in a co-managed configuration
• Monitors system health, enrollment status, and configuration policy compliance for Hybrid Entra ID Joined and cloud-native endpoints
• Maintains and troubleshoots Intune Configuration Profiles to maintain enterprise device standards
• Packages, tests, and deploys standard Win32, MSIX, and web applications using Patch My PC, Intune Management Extension and MECM
• Utilizes PowerShell scripts for administrative automation, software installation wrappers, and baseline remediation tasks
• Oversees application lifecycle updates, self-service software availability via Company Portal / Software Center, and third-party software catalog maintenance
• Performs operational administration of AVD host pools, session host health monitoring, and user session management
• Assists in updating session host gold images, managing FSLogix user profile storage containers, and troubleshooting virtual desktop connection or performance bottlenecks
• Process daily Idira/Cyberark Endpoint Privilege Manager (EPM) policy requests, elevation approvals, and policy exception reviews in accordance with zero-trust and least-privilege principles
• Supports Windows LAPS (Local Administrator Password Solution) implementation and password rotation tracking across domain and cloud environments
• Executes monthly Windows Update for Business (WUfB), Microsoft Autopatch, and third-party application patch distribution cycles across global endpoints
• Monitors Microsoft Defender for Endpoint alerts, BitLocker encryption status, and Attack Surface Reduction (ASR) policy compliance; remediate non-compliant devices promptness
• Collaborates with Security and Audit teams to fulfill vulnerability remediation tasks and routine security compliance reporting
• Operates and supports Windows Autopilot deployment profiles and Enrollment Status Page (ESP) configurations for rapid global device staging and provisioning
• Manages dynamic device groups, monitor enrollment trends, and carry out structured asset onboarding, re-imaging, and offboarding recovery workflows
• Serves as a Tier-2/3 technical escalation point for Service Desk technicians regarding complex endpoint, virtual desktop, and deployment failures
• Adheres to IT Service Management (ITSM) processes for Incident, Change, and Request management in tools such as ServiceNow
• Documents technical resolution procedures, create knowledge base (KB) articles for Tier-1 support, and assist in maintaining standard operating procedures (SOPs)
• Other duties as assigned

Minimum Qualifications

• Bachelor's Degree in Information Systems, Computer Science, or equivalent practical work experience.
• 3+ years of hands-on endpoint administration and technical support experience in an enterprise environment using Microsoft Intune, MECM/SCCM, and Active Directory / Entra ID.
• Practical proficiency with PowerShell for routine administration, custom software packaging, and endpoint troubleshooting script execution.
• Operational experience administering Azure Virtual Desktop (AVD) or equivalent enterprise VDI platforms.
• Hands-on experience supporting least-privilege administrative workflows using Idira/Cyberark EPM or equivalent Endpoint Privilege Management / PAM solutions.
• Solid understanding of Windows 10/11 operating systems, Windows Autopilot, co-management concepts, and TCP/IP networking fundamentals.

Preferred Qualifications

• Active Microsoft Certifications in Modern Workplace / Endpoint Management (e.g., Microsoft Certified: Endpoint Administrator Associate - MD-102 or Azure Virtual Desktop Specialty - AZ-140).
• ITIL Foundation Certification (v3 or v4) with experience working within structured Change Advisory Board (CAB) and incident management processes.
• Direct experience working with enterprise ITSM platforms (e.g., ServiceNow) and drafting technical escalation knowledge base articles.

Working Conditions and Physical Demands

For an office-based position, work is primarily performed in a professional indoor environment with minimal exposure to physical hazards. The role requires extended periods of sitting, frequent use of a computer and telephone, and occasional standing, walking, bending, or lifting light items up to 25 pounds.

Darling Ingredients is an equal opportunity employer and gives consideration to qualified applicants without regard to race, color, creed, religion, age, pregnancy, sex, sexual orientation, gender identity, national origin, genetic information, physical or mental disability, military service, protected veteran status, or any other characteristic protected by applicable federal, state and local law. Know Your Rights: If you would like more information, please click on the link and paste into your browser: https://www.eeoc.gov/poster of this job.