Desktop Administrator

ARCO a Family of Construction Companies•Richmond Heights, MO

47d•Onsite

About The Position

We are seeking a proactive and service-oriented Desktop Administrator to support and enhance our Windows-based and cloud-connected environment. In this role, you will be responsible for managing end-user devices, supporting identity and access through Azure Active Directory, and ensuring devices remain secure and compliant using tools like Microsoft Intune.

Requirements

2–5+ years of experience in endpoint administration and desktop support, with strong hands-on expertise in enterprise Windows 11 environments (2000+ devices)
Demonstrated experience administering Microsoft Intune, including device configuration, compliance policies, application deployment, and security baselines; Proficiency managing identities, devices, and groups within Microsoft Entra ID
Experience with Microsoft PowerShell to support remediations & application deployment for endpoints
Experience managing mobile endpoints across iOS and Android platforms, as well as supporting macOS devices
Working knowledge of Group Policy and traditional Active Directory environments; Familiarity with the Microsoft 365 ecosystem, including Exchange Online, Teams, and OneDrive
Understanding of core networking fundamentals including DNS, DHCP, TCP/IP, and VPN; Experience supporting and troubleshooting printer and copier environments
Proven ability to act as a technical escalation point for end-user support teams, with strong troubleshooting and communication skills
Ability to maintain clear documentation and effectively communicate technical information to both technical and non-technical audiences

Responsibilities

Serve as primary administrator of Microsoft Intune across a diverse device fleet including Windows 11 (physical and virtual), macOS, iOS, and Android
Manage device configuration policies, compliance baselines, and endpoint protection across both commercial and GCC High (secured) environments
Oversee application deployment, driver updates, and patching through Intune and Windows Update for Business
Maintain device provisioning policies and procedures via Microsoft Autopilot, supporting the full device lifecycle from provisioning through retirement
Manage device and group objects within Microsoft Entra ID
Administer Group Policy for on-premises environments while participating in the ongoing transition to cloud-native Intune policies for cloud-joined endpoints
Manage PatchMyPC for third-party application update deployment and quality assurance
Administer Apple Business Manager to streamline iOS device provisioning in the corporate environment
Maintain PrinterLogic for cloud-based printer driver deployment and configuration management; collaborate with the Support team and vendors on escalated printer and copier issues
Act as the escalation point for the wider IT Support team on complex endpoint issues, providing timely communication around troubleshooting steps, workarounds, and ongoing issue status
Produce regular reporting on device compliance, patching metrics, end user experience, and inventory details using Microsoft Excel and Power BI
Maintain accurate, up-to-date documentation for systems, processes, and troubleshooting procedures

Benefits

Industry-leading performance-based bonus program
Employee Stock Ownership Plan (ESOP)
Traditional and Roth 401k
Tuition reimbursement for associates
Scholarship for associates’ children up to $28,000 per child
1-month paid sabbatical after every five years of employment, plus $5,000 for travel
1-week paid volunteer leave each year
100% charitable match
Medical, dental, and vision insurance coverage
100% paid 12-week maternity leave