Client Technologies Engineer

maurices•Duluth, MN

1d•$65,000 - $80,000

About The Position

The Engineer is responsible for the secure, reliable, and efficient operation of end-user computing (EUC) and Microsoft 365 collaboration services across corporate and store environments. This role provides Level 2 administration and support, ensuring device lifecycle management, email/collaboration platform stability, and compliance with security and operational standards. The Administrator partners with Service Desk, Security, and Infrastructure teams to deliver a seamless colleague experience while meeting SLAs and compliance targets. This role leads day‑to‑day administration and engineering of Microsoft Intune (including Autopilot), Microsoft Configuration Manager (SCCM), and Jamf Pro for macOS/iOS/iPadOS, ensuring modern provisioning, compliance, patching, and software delivery at scale. Manages Microsoft 365 user identities, permissions, and licenses; monitors system health and service availability; and supports core collaboration tools.

Requirements

Associate’s or Bachelor’s in Computer Science/Information Systems or equivalent experience.
3–5+ years in end‑user computing with at least 2+ years administering Intune and/or SCCM, and 1+ year administering Jamf Pro.
Hands‑on experience with Autopilot, co‑management, ABM/DEP, VPP, app packaging, and patch orchestration.
Strong troubleshooting skills for Windows/macOS/iOS and M365 services.
Familiarity with Active Directory, Conditional Access, and security hardening.
Scripting competency in PowerShell and Bash.
Strong grasp of Entra ID/Azure AD, Group Policy, certificates/PKI, VPN/Wi‑Fi, and device security hardening.
Excellent verbal/written communication; able to translate technical concepts for non‑technical audiences.
Collaborative, adaptable, and comfortable leading through change.
Strong task ownership with attention to detail; delivers high‑quality work with minimal direction.
Participation in scheduled on‑call rotation for priority incidents and key business events.
Device compliance rate (Windows/macOS/iOS) ≥ target; patch compliance within SLA.
Autopilot/DEP enrollment success and time‑to‑ready within target thresholds.
Packaging first‑pass success rate, rollback defects, and mean time to remediate.
Incident volume reduction for recurring endpoint issues; MTTR for Sev‑2/Sev‑3 within SLA.
Knowledge article currency and adoption; self‑service resolution growth.

Nice To Haves

Certifications: Microsoft MD‑102/Endpoint Administrator, Microsoft 365 Certified: Fundamentals (MS-900), Jamf Certified Tech/Pro, ITIL Foundation.
Experience with S1 for Endpoint, Conditional Access, Log Analytics/KQL, and endpoint analytics.
Retail/multi‑site support background and remote‑first workforce support.

Responsibilities

End-User Computing Own day‑to‑day administration, configuration, and health of Microsoft Intune, SCCM, and Jamf Pro platforms
Manage device and app policies via Intune (Endpoint Manager), including compliance, configuration profiles, and conditional access.
Perform day-to-day administration of EUC devices (Windows, macOS, iOS) including provisioning, configuration, and patching.
Execute Installations, Moves, Adds, and Changes (IMACs) for hardware and software.
Build, test, and publish application packages, configuration baselines, and scripts.
Design and maintain Windows Autopilot and ABM/DEP zero‑touch provisioning for Windows and Apple devices.
Own patch orchestration using phased rings and maintenance windows.
Implement and tune device compliance and conditional access in concert with Security/Entra ID.
Provide Level 2 troubleshooting for device incidents and escalate complex issues as needed.
Maintain accurate hardware/software inventory and ensure compliance with security baselines.
Assist with VIP support and coordinate with vendors for escalations.
Partner with Security on vulnerability findings and operationalize remediation.
Microsoft 365 & Collaboration Configure and manage tenants, subscriptions, and service settings in Microsoft 365 Admin Center Exchange, Teams, SharePoint, and related collaboration tools.
Provision/deprovision users, groups, and roles; maintain least‑privilege access; manage license assignment and optimization.
Maintain MFA, SSPR, Conditional Access, and role‑based access control (RBAC).
Administer Exchange Online mail flow, transport rules, anti-spam/anti-phishing, mailbox quotas, distribution lists, and mailbox policies.
Collaborate with email security team and assist with compliance/e-discovery requests.
Evaluate new Microsoft features, perform pilots, and coordinate rollouts.
Provide Level 2 support for email and collaboration incidents, including mobile device connectivity.
Document processes and maintain knowledge articles for common issues.
Operations & Continuous Improvement Monitor system health and performance for EUC and M365 platforms.
Participate in on-call rotation for priority incidents.
Contribute to projects involving endpoint modernization and collaboration enhancements.
Maintain runbooks, change plans, and user-facing guides.
Maintain accurate hardware and software inventories across platforms.
Create and maintain standard desktop configurations and gold images.
Provide enablement/training to the extended support team.
Support audits and ensure adherence to regulatory, legal, and corporate policies; maintain documentation and evidence for controls.