Microsoft 365 and Endpoint Administrator

Compugen Systems, Inc. (CSI)•Brownsburg, IN

2d•Onsite

About The Position

Compugen Systems, Inc. (CSI), an affiliate of Compugen Inc., is an IT service delivery company focused on the business outcome of technology. We improve the human experience as organizations work to design, acquire, integrate, and operate technology for productivity improvement and competitive advantage. CSI provides innovative technology-based services to accelerate your transformation in the Modern Workspace and Hybrid IT with our uniquely crafted managed, professional, and field services. At CSI, we believe that every day we have, is another opportunity to innovate, inspire, and impact the world for the better. Our vision is to redefine customer experience, join us.

Requirements

2–3+ years of hands-on experience administering Microsoft 365, Intune, Entra ID, and Windows endpoints.
Hands-on administration of Microsoft 365 tenant environments.
Experience with Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
Microsoft 365 licensing and user administration.
Ability to manage permissions, access, and tenant-level configurations.
Understanding of Microsoft 365 security and compliance fundamentals.
Strong hands-on experience with Microsoft Intune administration.
Ability to create and manage configuration profiles and compliance policies.
Windows and iOS/iPadOS device enrollment and management.
Application packaging and deployment using Win32/MSI.
Experience creating application detection, requirement, and assignment rules.
Ability to manage Required and Available application deployments.
Hands-on experience with Windows Autopilot.
Understanding of endpoint patching, vulnerability management, and device lifecycle management.
Hands-on experience administering Microsoft Entra ID.
User and group management.
Dynamic groups and membership rules.
MFA configuration and administration.
Role-based access control and identity security.
Understanding of hybrid identity with on-premises Active Directory.
Strong PowerShell scripting and automation skills.
Experience using Microsoft Graph PowerShell SDK and Exchange Online PowerShell.
Ability to develop scripts for user provisioning, licensing, reporting, device management, and administrative tasks.
An automation-first mindset with the ability to identify and eliminate repetitive manual processes.
Security-conscious approach to Microsoft 365 and endpoint administration.
Basic experience with Microsoft Defender for Endpoint.
Familiarity with Microsoft Purview and Microsoft 365 compliance capabilities.
Understanding of endpoint security, vulnerability remediation, patch management, and access controls.
Experience with ServiceNow or a comparable ITSM platform.
Ability to manage incidents, service requests, and changes.
Asset and CMDB/Configuration Item management.
Experience creating operational reports and dashboards.
Strong analytical and troubleshooting skills.
Ability to identify root causes rather than simply resolving symptoms.
Comfortable troubleshooting issues across Microsoft 365, Intune, Entra ID, applications, devices, and identity.
Ability to translate technical issues into practical solutions.
Strong written and verbal communication skills.
Ability to create clear SOPs, runbooks, knowledge articles, and technical documentation.
Strong organizational and time-management skills.
Ability to work independently while collaborating effectively with Security, Network, IT, vendors, and business teams.

Nice To Haves

Strong understanding of ITIL-based processes is a plus.

Responsibilities

Administering, securing, maintaining, and improving the Microsoft 365 and endpoint environment.
Reviewing Intune device compliance, enrollment status, application deployment failures, security alerts, and Microsoft 365 service health.
Managing endpoints in Intune, including reviewing Windows and iOS/iPadOS devices, troubleshooting enrollment and compliance issues, updating configuration policies, and ensuring devices meet organizational security requirements.
Deploying and managing applications, including packaging Win32/MSI applications, creating detection and requirement rules, testing deployments, and assigning applications to appropriate groups.
Managing Windows Autopilot, including configuring and troubleshooting device provisioning, deployment profiles, enrollment status, and standardized Windows deployments.
Administering Entra ID, including creating and managing users and groups, maintaining dynamic group membership rules, managing MFA and access, and supporting identity-related administration.
Administering Microsoft 365 services, including Exchange Online, SharePoint, OneDrive, Teams, permissions, and licensing.
Automating repetitive tasks using PowerShell and Microsoft Graph for provisioning, licensing, reporting, device operations, and other administrative activities.
Managing ITSM activities by reviewing and working on ServiceNow incidents, requests, and changes while maintaining accurate asset and CMDB records.
Working with security teams to assist with endpoint security, Microsoft Defender, compliance requirements, patching, and vulnerability remediation.
Supporting projects and rollouts, including application deployments, hardware refreshes, Windows upgrades, migrations, Autopilot implementations, and Microsoft 365 platform improvements.
Documenting the environment by updating runbooks, SOPs, knowledge articles, configuration documentation, and deployment procedures.