SCCM / Intune / Windows Administrator (L3)

Endpoint Management & Modern Device Administration

• Administer, maintain, and optimize Microsoft Intune and SCCM/MECM environments for enterprise endpoint management.
• Manage device enrollment, provisioning, imaging, deployment, and lifecycle activities across Windows endpoints.
• Implement and support Windows Autopilot and modern device management solutions.
• Configure compliance policies, configuration profiles, device restrictions, and endpoint governance standards.
• Manage co-management environments integrating SCCM and Intune.
• Monitor endpoint posture and ensure adherence to organizational technology standards.

Software Distribution & Patch Management

• Package, test, deploy, and support enterprise applications using SCCM and Intune.
• Manage deployment of operating system patches, cumulative updates, feature updates, and third-party software patches.
• Monitor software distribution performance and deployment success metrics.
• Perform patch compliance reporting and remediation activities.
• Ensure endpoint systems remain compliant with security and operational standards.
• Coordinate patching schedules and maintenance windows with business and infrastructure teams.

Windows Administration

• Support and administer Windows 10 and Windows 11 enterprise environments.
• Manage OS migrations, feature upgrades, image maintenance, and deployment strategies.
• Troubleshoot Windows operating system issues related to performance, reliability, and user experience.
• Administer Active Directory integration and Group Policy configurations.
• Maintain Windows security baselines and hardening standards.
• Support endpoint performance optimization initiatives and system lifecycle planning.

Endpoint Security & Compliance

• Implement and maintain endpoint security controls aligned with enterprise security policies.
• Support Microsoft Defender for Endpoint, BitLocker encryption, and endpoint protection technologies.
• Conduct vulnerability assessments and coordinate remediation activities.
• Partner with cybersecurity teams to address security findings and policy compliance gaps.
• Ensure regulatory, audit, and organizational compliance requirements are met.
• Support Zero Trust and endpoint security initiatives.

Infrastructure Support & Advanced Troubleshooting

• Diagnose and resolve complex SCCM client, Intune enrollment, software deployment, and endpoint configuration issues.
• Support enterprise endpoint infrastructure including management points, distribution points, software update points, and related services.
• Perform root cause analysis (RCA) for recurring incidents and service disruptions.
• Act as an L3 escalation point for critical endpoint management issues.
• Collaborate with server, network, cloud, and security teams to ensure seamless endpoint operations.
• Maintain system stability and improve endpoint service availability.

Automation & Operational Excellence

• Develop, maintain, and enhance PowerShell scripts for automation and operational efficiency.
• Automate routine administration, health checks, reporting, and remediation activities.
• Build operational dashboards and executive reporting metrics.
• Monitor endpoint health, deployment performance, compliance status, and service quality metrics.
• Identify opportunities to reduce manual effort through process automation and standardization.

Documentation, Governance & ITSM

• Maintain runbooks, standard operating procedures (SOPs), and technical documentation.
• Support audit activities and compliance reviews.
• Participate in Incident, Change, Problem, Release, and Configuration Management processes.
• Ensure all activities comply with ITIL and organizational governance standards.
• Maintain accurate records for system configurations, deployments, and operational changes.

What you’ll need to succeed (required skills)