Application Administrator Senior

City of Charlotte

3d•$98,731 - $141,926•Onsite

About The Position

Welcome to the City of Charlotte. Charlotte is America’s Queen City, opening her arms to a diverse and inclusive community of residents, businesses and visitors alike. Here you will find a safe, family-oriented city where people work together to help everyone thrive. The mission of the City of Charlotte is to deliver quality public services and promote the safety, health, and quality of life for all residents. Our guiding principles include: Attracting and retaining a skilled and diverse workforce, Valuing teamwork, openness, accountability, productivity, and employee development, Providing all customers with courteous, responsive, accessible, and seamless quality services, Taking initiative to identify, analyze, and solve problems, Collaborating with stakeholders to make informed decisions. We are looking for a Senior Unified Endpoint Engineer specializing in Microsoft Endpoint Configuration Manager (MECM/SCCM), Intune and other related endpoint technologies to design, implement, and optimize enterprise Unified Endpoint Management (UEM) solutions. This senior role manages Windows and Apple endpoints, managed and BYOD mobile devices, endpoint automation, security policy enforcement, and scalable provisioning practices across a large enterprise environment.

Requirements

Expert-level knowledge of Microsoft SCCM/MECM, Configuration Manager, Intune, co-management, and enterprise UEM architecture.
Advanced experience with Windows 10/11 imaging and provisioning, Windows Autopilot, endpoint imaging/provisioning strategy, and Active Directory Group Policy management.
Extensive experience managing large endpoint fleets.
Strong PowerShell scripting skills, including automation design, remote device interaction, troubleshooting, testing, exception handling, and debugging.
Detailed knowledge of Windows operating system internals, including registry, services, file systems, Active Directory, security, and OS internals.
Experience with Endpoint Analytics, proactive remediations, compliance reporting, patch reporting, and operational metrics that support decision-making and service improvement.
Working knowledge of networking concepts including DNS, DHCP, TCP/IP, zero-trust connectivity, and endpoint network security considerations.
Thorough understanding of client management, server management, cloud services, SaaS concepts, secure provisioning, and vulnerability management.
Experience implementing and maintaining PCI-compliant and industry-compliant endpoint data security controls.
Ability to run multiple technical projects simultaneously and coordinate work across infrastructure, security, service desk, application, and departmental stakeholders.
Strong customer service orientation, communication skills, and documentation discipline for technical and non-technical audiences.
Experience supporting a large enterprise user base of 5,000+ employees.
Knowledge of Apple Device Enrollment Program (DEP), Apple Business Manager (ABM), iOS, Android, macOS, and mobile application management profiles and policies.
High School Graduate or Equivalent and nine (9) years of related work experience OR 2 Year College Degree and seven (7) years of related work experience OR Bachelor's Level Degree and five (5) year of related work experience OR Master's Level Degree and three (3) years of related work experience or an equivalent combination of education and relevant experience that provides the necessary knowledge, skills, and abilities to successfully perform the essential job duties.
Five (5) or more years of progressively responsible IT experience supporting enterprise endpoint management environments, preferably supporting organizations with 5,000+ users.
Demonstrated senior-level experience designing, implementing, administering, and optimizing Microsoft Endpoint Configuration Manager (MECM/SCCM) solutions.
Experience managing and functioning as the senior technical resource for Windows 10 & 11 endpoint lifecycle, including operating system deployment, imaging, provisioning, patch management, and software deployment.
Strong experience developing and maintaining PowerShell automation for endpoint administration and operational efficiency.
Experience administering Active Directory and Group Policy in a large enterprise environment.
Experience troubleshooting complex endpoint, operating system, and client management issues across enterprise environments.
Knowledge of enterprise endpoint security practices, vulnerability remediation, and secure configuration management.
Experience coordinating enterprise-wide technology changes and working effectively with infrastructure, security, application, and support teams.

Nice To Haves

Experience using AI-assisted administrative tools, such as Microsoft Copilot or ChatGPT Enterprise, to improve operational efficiency, scripting, documentation, troubleshooting, or knowledge sharing is desirable.
Experience designing, implementing, and optimizing UEM solutions using Microsoft Intune, Autopilot, and Entra.
Experience managing mobile devices using MDM, MAM and Apple Business Manager.
Experience providing technical guidance, training, work quality oversight, and work assignment support in a lead role.
Certifications in Microsoft Intune, SCCM/MECM, Endpoint Administrator, or other UEM platforms are preferred; no professional license or certification is required.

Responsibilities

Design and implement enterprise UEM solutions using Configuration Manager, including secure and scalable endpoint configurations, Windows 10/11 provisioning, BYOD, mobile device management, and Group Policy strategy.
Manage and optimize endpoint imaging for Windows 10 & 11 Systems, including MDM/UEM policy enforcement and device lifecycle management.
Develop, maintain, and troubleshoot PowerShell automation for endpoint operations, remote shell interaction, Windows registry, services, file systems, exception handling, testing, and debugging.
Coordinate endpoint patching, Windows Monthly Security activities, deployment readiness, remediation planning, and status reporting to ensure endpoints remain secure, stable, and compliant.
Represent UEM in Change Advisory Board (CAB) processes by communicating planned endpoint changes, assessing implementation risk, coordinating deployment timing, and providing clear technical and business impact updates.
Support zero-trust endpoint security initiatives, PCI and industry compliance, secure provisioning, vulnerability management, data security controls, and enterprise endpoint configuration standards.
Lead cross-functional endpoint projects and provide senior-level technical guidance, documentation, work quality oversight, training, instruction, and work assignment support for team members and internal customers.
Build trusted partnerships with departments such as Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, IT liaisons and departmental stakeholders by proactively identifying endpoint improvement opportunities, consulting on technology needs, offering assistance, and delivering strong customer service to technical and non-technical audiences.
Exercise significant discretion and independent judgment by recommending endpoint standards, independently designing provisioning strategies, resolving matters of technical significance, and advising IT leadership on UEM architecture and security policy decisions.
Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency.