Endpoint Systems Administrator

Ellis Medicine • Schenectady, NY

3d • Onsite

About The Position

The Endpoint Systems Administrator is responsible for the administration, security, compliance, and lifecycle management of enterprise endpoint devices across Ellis Medicine. This role manages Microsoft Intune, Mobile Device Management (MDM), Mobile Application Management (MAM), endpoint patching, device compliance, and endpoint security controls. The position partners with Infrastructure, Network Services, Information Security, Service Desk, and Clinical Operations teams to ensure endpoint devices remain secure, reliable, compliant, and operationally efficient. The Endpoint Systems Administrator serves as a subject matter expert for endpoint management technologies and drives continuous improvement of endpoint security posture, automation, and standardization.

Requirements

• Associate's degree in Information Technology, Computer Science, Information Systems, or related field required.
• Minimum 3 years of experience supporting enterprise endpoint management platforms, including administering Microsoft Intune in a production environment, enterprise patch management solutions, Windows endpoint administration, and network access control solutions for endpoints.
• Strong analytical and troubleshooting skills.
• Ability to manage multiple priorities in a fast-paced healthcare environment.
• Excellent written and verbal communication skills.
• Strong customer service orientation.
• Process improvement mindset.
• Attention to detail and commitment to security best practices.
• Ability to develop and maintain technical documentation.
• Microsoft Intune, Microsoft Endpoint Manager, Mobile Device Management (MDM), Mobile Application Management (MAM), Microsoft Entra ID (Azure AD), Microsoft 365 Administration, Windows Operating Systems, Patch Management, Group Policy, PowerShell Scripting, Microsoft Defender, Endpoint Security Controls, Device Compliance Policies, Conditional Access, Cisco ISE.

Nice To Haves

• Bachelor's degree preferred.
• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Security Administrator Associate
• ITIL Foundation
• CompTIA Security+
• CompTIA Network+
• Experience managing mobile devices in a healthcare or regulated environment preferred.
• Healthcare IT experience
• Apple Business Manager
• Android Enterprise
• endpoint compliance auditing
• vulnerability management platforms
• software deployment automation
• cybersecurity and regulatory compliance initiatives.

Responsibilities

• Administer Microsoft Intune for Windows, iOS, Android, and macOS devices.
• Manage endpoint provisioning, enrollment, configuration profiles, compliance policies, and device lifecycle processes.
• Develop and maintain device standards and endpoint configuration baselines.
• Support endpoint hardware refresh and deployment initiatives.
• Administer phone carrier services and accounts
• Administer operating system and third-party application patching processes.
• Monitor endpoint compliance and remediation activities.
• Coordinate monthly patch deployment cycles and emergency security updates.
• Identify and remediate endpoint vulnerabilities in collaboration with Information Security.
• Produce compliance and patch management reports for leadership and audit reviews.
• Manage organizational mobile devices through Intune and related MDM platforms.
• Maintain corporate-owned and personally owned device policies.
• Configure and support Apple Business Manager and Android Enterprise integrations.
• Develop and maintain mobile security standards and controls.
• Manage application deployment and mobile device compliance requirements.
• Implement and maintain endpoint security controls and security baselines.
• Configure Conditional Access and device compliance policies.
• Manage and configure endpoint access within a NAC such as Cisco ISE.
• Support endpoint encryption, Microsoft Defender, and security hardening initiatives.
• Assist with cybersecurity investigations involving endpoint systems.
• Participate in incident response and remediation efforts.

Benefits

• All qualified applicants will receive consideration for employment without regard to, and will prohibit, discrimination on the basis of race, creed, color, religion, sex/gender (including pregnancy), age, national origin, disability (including pregnancy-related conditions), genetic information, predisposition or carrier status, military or veteran status, prior arrest or conviction record, marital or familial status, sexual orientation, transgender status, gender identity, gender expression, reproductive health decisions, domestic violence victim status, known relationship or association with any member of a protected class, and any other characteristic protected by applicable law violates federal, state and, where applicable, local laws , reproductive health decisions or source of payment, consistent with applicable legislation and to comply with the laws pertaining thereto.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree