Intune Systems Administrator III

Cambia Health Solutions•Salt Lake, UT

2d•Hybrid

About The Position

The Systems Administrator III / Intune and Enterprise Modern Device Management Administrator is part of Cambia’s IT Operations team. The role participates in installing, upgrading, testing, and maintaining computer systems, operating systems, and software applications, with a focus on Microsoft Intune and enterprise modern device management. It provides technical, interpersonal, and administrative support in day-to-day work. The administrator engineers and operates Microsoft Intune, Entra-integrated device management, and Windows 365 services at enterprise scale. The position owns the architecture, implementation, administration, and continuous improvement of modern endpoint-management services; manages Windows enrollment, Autopilot, configuration and compliance policies, endpoint security, application delivery, and update rings; and integrates device management with Entra ID. It also administers Patch My PC, develops Ansible and PowerShell automation, and designs and supports Windows 365 Cloud PC and related services. The role troubleshoots advanced device, identity, application, policy, patching, and Cloud PC issues; monitors service health and user experience; leads upgrades and service improvements; and maintains technical standards, documentation, change control, disaster recovery planning, security, availability, capacity, and lifecycle practices. It partners with security, networking, application, support, and vendor teams and provides technical leadership and mentoring. This is a hybrid position requiring three days per week in the office at one of the listed locations. Preference is given to current employees and candidates within commuting distance of certain offices or willing to relocate. Salary varies by location: the expected range is $93,500–$126,500 per year under the national pay structure or $84,200–$113,900 under the regional pay structure. The posting also lists full salary ranges of $88,000–$143,000 and $79,500–$113,900, respectively, and a 10% bonus target.

Requirements

Bachelor’s degree in Computer Science, Mathematics, Business Administration, or a related field; appropriate additional experience beyond the minimum required experience may substitute for education.
Five or more years designing, implementing, and supporting enterprise Microsoft endpoint-management solutions.
Advanced proficiency with Intune configuration, compliance, application delivery, Autopilot, co-management, and endpoint security.
Ability to design and troubleshoot Entra-integrated device identity, authentication, and Conditional Access solutions.
Proven ability to automate device provisioning, configuration, patching, and reporting with Ansible and PowerShell.
Experience leading platform upgrades, service improvements, incident resolution, change control, and lifecycle planning.
Strong technical documentation, project leadership, communication, and cross-team collaboration skills.

Nice To Haves

Advanced experience administering Microsoft Intune and enterprise device management for Windows endpoints.
Deep knowledge of Microsoft Entra ID, Conditional Access, Windows Hello for Business, device identity, and access controls.
Experience with Patch My PC for third-party application packaging, deployment, patching, and compliance.
Experience automating endpoint operations with Ansible and PowerShell.
Strong knowledge of Windows 365 Cloud PC, Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot.
Relevant Microsoft endpoint, identity, or Windows 365 certification.
Expert-level Intune administration across Windows enrollment, Autopilot, configuration profiles, compliance, endpoint security, application delivery, and reporting.
Advanced Entra ID knowledge, including device registration and join, Conditional Access, multifactor authentication, Windows Hello for Business, and role-based access.
Hands-on experience with Patch My PC application packaging, publishing, update rings, patch compliance, and remediation.
Ansible and PowerShell automation for repeatable device configuration, application deployment, compliance, and operational reporting.
Advanced knowledge of Windows 365 Cloud PC provisioning, policy, sizing, networking, security, monitoring, and lifecycle management.
Knowledge of Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot architecture, deployment, authentication, and support.

Responsibilities

Engineer and operate Microsoft Intune, Entra-integrated device management, and Windows 365 services at enterprise scale.
Own the architecture, implementation, administration, and continuous improvement of Intune and enterprise modern device management.
Design and maintain Windows enrollment, Autopilot, configuration profiles, compliance, endpoint security, application delivery, and update policies and rings.
Integrate Intune with Entra ID for device identity, Conditional Access, Windows Hello for Business, authentication, and secure access.
Package, publish, deploy, patch, and remediate Microsoft and third-party applications using Intune and Patch My PC.
Build Ansible and PowerShell automation for device provisioning, configuration, application deployment, patching, inventory, compliance, reporting, and remediation.
Administer Windows 365 Cloud PC environments, including provisioning, sizing, networking, policies, monitoring, security, and lifecycle operations.
Design and support Windows 365 Cloud App, Windows 365 Link, and Windows 365 Boot solutions and user experiences.
Troubleshoot complex device, identity, application, policy, patching, and Cloud PC issues across Intune and Entra.
Monitor service health and user experience; resolve advanced incidents and maintain security, availability, capacity, and lifecycle standards.
Lead platform upgrades, service improvements, technical standards, change control, and disaster recovery planning.
Develop roadmaps, technical documentation, operating procedures, and training for endpoint and Windows 365 services.
Partner with security, networking, application, support, and vendor teams; provide technical leadership and mentoring.

Benefits

Competitive salary and bonus opportunities, including a 10% bonus target.
Market-leading 401(k) with company match and potential discretionary contribution based on company performance.
Medical, dental, and vision coverage for employees and eligible family members, including mental health benefits.
Annual employer contribution to a health savings account.
Paid time off that varies by role and tenure, plus 10 company-paid holidays.
Up to 12 weeks of paid parental time off, subject to eligibility requirements.
Award-winning wellness programs with participation rewards.
Employee Assistance Fund.
Commute and parking benefits.
Employee resource groups and opportunities to participate in Cambia-supported community outreach programs.