Endpoint Administrator

City of Chaska•Chaska City Hall, MN

1d•Onsite

About The Position

The City of Chaska is seeking a knowledgeable and motivated Endpoint Administrator to manage and support our modern endpoint management environment. This position plays a key role in maintaining a secure, efficient, and cloud-first technology infrastructure by administering Microsoft Entra ID, Microsoft Intune, Windows Autopilot, and Apple Business Manager. As the Endpoint Administrator, you will be responsible for the secure configuration, deployment, and lifecycle management of Windows, macOS, and mobile devices. This includes zero-touch device provisioning, software deployment, patch management, endpoint security, and user lifecycle management. If you enjoy leveraging technology to improve organizational efficiency, strengthen security, and provide exceptional support, we encourage you to apply.

Requirements

Valid driver’s license
Is able to report to Chaska City Hall within 1 hour in emergency situations during on call schedule.
Associates degree in information technology, computer science field and three years of experience desktop/endpoint support.
1 year of experience with the following: Microsoft Entra ID, Intune, Window’s Autopilot, Mobile device management

Nice To Haves

Bachelor degree in information technology, computer science field, preferred.
Strong troubleshooting and problem-solving skills in a mixed-device environment, including Autopilot deployments
Solid understanding of endpoint security best practices.
Demonstrated customer service skill is desired
Strong knowledge of Microsoft EntraID and hybrid identity
Microsoft Intune device and application management
Window’s autopilot: configuration, deployment, and troubleshooting
Apple Business Manager and macOS Management
Windows 10/11 deployment and update strategies.
Preferred certifications: Microsoft Certified: Endpoint Administrator Associate (MD-102)
Microsoft Certified: Identity and Access Administrator Associate
Apple Certified Support Professional (ACSP)
CompTIA A+, Network+, Security+

Responsibilities

Manage user accounts, groups, licensing, and access in Microsoft Entra ID.
Handle user provisioning, deprovisioning, and lifecycle processes.
Configure and enforce conditional access policies and multi-factor authentication.
Administer Microsoft Intune for device enrollment, configuration profiles, compliance policies, and security baselines.
Manage Windows Autopilot Zero-touch deployment, including device registration/import, profile creation and assignment, and deployment troubleshooting.
Manage Apple Business Manager for macOS and iOS device enrollment and supervision.
Deploy, update, retire, and troubleshoot managed devices across Windows, macOS, and mobile platforms using modern provisioning methods.
Deploy and manage applications (Win32, Microsoft Store, LOB, etc.) through Intune.
Oversee Windows Update for Business policies and ensure timely patching of all endpoints.
Maintain software inventory and license compliance.
Provide Tier 2/3 technical support for endpoint hardware and software issues.
Troubleshoot Entra ID join, Intune enrollment, Autopilot provisioning, device sync, and application deployment problems.
Resolve user access and device-related incidents efficiently.
Monitor endpoint security alerts and ensure devices meet organizational compliance standards.
Assist with security audits and reporting.
Maintain up-to-date documentation for configurations, processes, and procedures (including Autopilot profiles and deployment workflows).
Contribute to the continuous improvement of endpoint management standards and automation.
Train end users and team members on new tools and processes.
Participate in on-call rotation as required.
Collaborate with other IT staff on broader infrastructure and security projects.
Perform other related duties as assigned.