Intune Systems Administrator III

Cambia Health Solutions•Little Rock, AR

1d•$79,500 - $143,000•Hybrid

About The Position

The Intune Systems Administrator III is a member of Cambia’s IT Operations team and helps install, upgrade, test, and maintain computer systems, operating systems, and software, with a focus on Microsoft Intune and enterprise modern device management. The role engineers and operates Intune, Entra-integrated device management, and Windows 365 services at enterprise scale, supporting secure and reliable endpoint services and user experiences. This position designs and maintains endpoint enrollment, Autopilot, configuration, compliance, endpoint security, application delivery, and update policies. It also automates device operations, administers Windows 365 environments, troubleshoots complex incidents, and leads platform improvements, standards, documentation, change control, and lifecycle planning. The administrator partners with security, networking, application, support, and vendor teams, and provides technical leadership and mentoring. This is a hybrid role requiring three days per week in the office at Cambia offices in Salt Lake City, Boise, Fargo, Portland, Vancouver, Renton, Medford, Burlington, Lewiston, Little Rock, or Springdale. Preference is given to current employees and candidates who live within commuting distance of Salt Lake City, Boise, Fargo, Lewiston, Little Rock, or Springdale, or are willing to relocate. The position requires a bachelor’s degree in Computer Science, Mathematics, Business Administration, or a related field; appropriate additional experience beyond the minimum experience requirement may substitute for education. Five or more years designing, implementing, and supporting enterprise Microsoft endpoint-management solutions are required. Salary depends on location and qualifications. The expected hiring range is $93,500–$126,500 per year under the national pay structure or $84,200–$113,900 under the regional pay structure; the respective full ranges are $88,000–$143,000 and $79,500–$113,900. The bonus target is 10%.

Requirements

Bachelor’s degree in Computer Science, Mathematics, Business Administration, or a related field; appropriate additional experience beyond the minimum required experience may substitute for education.
Five or more years designing, implementing, and supporting enterprise Microsoft endpoint-management solutions.
Advanced proficiency with Intune configuration, compliance, application delivery, Autopilot, co-management, and endpoint security.
Ability to design and troubleshoot Entra-integrated device identity, authentication, and Conditional Access solutions.
Proven ability to automate device provisioning, configuration, patching, and reporting with Ansible and PowerShell.
Experience leading platform upgrades, service improvements, incident resolution, change control, and lifecycle planning.
Strong technical documentation, project leadership, communication, and cross-team collaboration skills.

Nice To Haves

Advanced experience administering Microsoft Intune and enterprise device management for Windows endpoints.
Deep knowledge of Microsoft Entra ID, Conditional Access, Windows Hello for Business, device identity, and access controls.
Experience with Patch My PC for third-party application packaging, deployment, patching, and compliance.
Experience automating endpoint operations with Ansible and PowerShell.
Strong knowledge of Windows 365 Cloud PC, Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot.
Relevant Microsoft endpoint, identity, or Windows 365 certification.
Expert-level Intune administration across Windows enrollment, Autopilot, configuration profiles, compliance, endpoint security, application delivery, and reporting.
Advanced Entra ID knowledge, including device registration and join, Conditional Access, multifactor authentication, Windows Hello for Business, and role-based access.
Hands-on experience with Patch My PC application packaging, publishing, update rings, patch compliance, and remediation.
Ansible and PowerShell automation for repeatable device configuration, application deployment, compliance, and operational reporting.
Advanced knowledge of Windows 365 Cloud PC provisioning, policy, sizing, networking, security, monitoring, and lifecycle management.
Knowledge of Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot architecture, deployment, authentication, and support.

Responsibilities

Engineer and operate Microsoft Intune, Entra-integrated device management, and Windows 365 services at enterprise scale.
Design and maintain enrollment, Autopilot, configuration, compliance, endpoint security, application, and update policies.
Package, deploy, patch, and remediate Microsoft and third-party applications using Intune and Patch My PC.
Automate provisioning, configuration, compliance, reporting, and remediation with Ansible and PowerShell.
Administer Windows 365 Cloud PC environments, including provisioning, sizing, networking, policies, monitoring, security, and lifecycle operations.
Support Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot deployments and user experiences.
Troubleshoot complex device, identity, application, policy, patching, and Cloud PC issues across Intune and Entra.
Lead platform upgrades, service improvements, technical standards, documentation, change control, and disaster recovery planning.
Partner with security, networking, application, support, and vendor teams; provide technical leadership and mentoring.
Own the architecture, implementation, administration, and continuous improvement of Microsoft Intune and enterprise modern device management.
Manage Windows enrollment, Autopilot, configuration profiles, compliance, endpoint security, application delivery, update rings, and role-based administration.
Integrate Intune with Entra ID for device identity, Conditional Access, Windows Hello for Business, authentication, and secure access.
Administer Patch My PC publishing, assignments, patching, compliance, and remediation for third-party applications.
Build Ansible and PowerShell automation for device provisioning, configuration, application deployment, patching, inventory, reporting, and remediation.
Design and support Windows 365 Cloud PC, Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot solutions.
Monitor service health and user experience; resolve advanced incidents and maintain security, availability, capacity, and lifecycle standards.
Develop roadmaps, technical documentation, operating procedures, and training for endpoint and Windows 365 services.

Benefits

Competitive salary
Bonus opportunities
401(k) plan with significant company match and potential discretionary company-performance contribution
Medical coverage
Dental coverage
Vision coverage
Mental health benefits
Annual employer contribution to a health savings account
Paid time off
10 company-paid holidays
Up to 12 weeks of paid parental time off, subject to eligibility
Wellness programs
Employee Assistance Fund
Commute and parking benefits
Employee resource groups
Cambia-supported community outreach opportunities