Sr. Microsoft 365 & Endpoint Administrator

Omni Hotels & Resorts•Dallas, TX

1d•Onsite

About The Position

The Microsoft 365 & Endpoint Administrator administers, secures, supports, and continuously improves Omni Hotels & Resorts' Microsoft 365, Microsoft Intune, Active Directory, and Group Policy environments. This hands-on, in-office role partners with Infrastructure and IT Security to manage cloud collaboration services, endpoint configuration and compliance, application deployment, and identity-related administration across corporate offices, hotels, resorts, and remote associates. The role serves as an escalation resource for IT Support Services and property IT teams and provides day-to-day oversight of one Microsoft 365 Administrator. The administrator manages Microsoft 365 services and tenant settings; Intune enrollment, configuration, compliance, security, updates, provisioning, and application deployment; and Active Directory objects, permissions, and Group Policy. The position also supports Entra ID, MFA, Conditional Access, endpoint security, and documented change-control practices. It supports a geographically distributed, 24x7 hospitality environment, participates in operational management processes, and may provide scheduled on-call or after-hours support when required. The role recommends and implements improvements to Microsoft 365, Intune, Autopilot, and endpoint management; develops repeatable standards; uses PowerShell and Microsoft Graph where appropriate to automate administration, reporting, and remediation; and evaluates new Microsoft capabilities. It also provides technical guidance and day-to-day supervision to one Microsoft 365 Administrator.

Requirements

5–8 years of progressive experience supporting Microsoft enterprise technologies, including hands-on Microsoft 365 and Microsoft Intune administration.
Working knowledge of Microsoft Entra ID, Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft 365 Apps, Windows 10/11, Windows Autopilot, device compliance, and application deployment.
Experience with MFA, Conditional Access, endpoint security, and role-based access control.
Strong troubleshooting, root-cause analysis, documentation, change-management, and organizational skills.
Ability to manage multiple technical initiatives, work independently, and collaborate across IT Support Services, Information Security, Infrastructure, application teams, vendors, and property IT.
Strong customer-service orientation and communication skills appropriate for Omni's hospitality environment.
Hands-on experience administering Active Directory objects, OUs, delegated permissions, and GPOs, including policy troubleshooting and hybrid identity support.
Microsoft O365 certification is required.

Nice To Haves

Experience supporting a multi-site enterprise, hotel, resort, retail, or other 24x7 customer-service environment.
Experience with Microsoft Graph, Apple Business Manager, Windows Update for Business, and Group Policy migration to modern management.
Experience with enterprise vulnerability-management and endpoint-security platforms.
ITIL knowledge or experience with formal incident, problem, change, and request management.
Experience providing technical guidance or coordinating the work of other IT staff.

Responsibilities

Administer Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft 365 Apps, and related tenant settings.
Manage users, groups, licenses, service configurations, and delegated administrative roles.
Monitor service health and troubleshoot authentication, licensing, mailbox, collaboration, and application issues.
Administer Microsoft Intune for Omni-managed Windows, macOS, iOS, and Android devices.
Maintain device enrollment, configuration, compliance, security, update, and restriction policies.
Administer Windows Autopilot and standardized device provisioning, reassignment, reset, retirement, and decommissioning processes.
Package, test, deploy, update, and retire applications through Intune and Company Portal.
Monitor device health, compliance, deployment results, unsupported operating systems, and stale device records.
Administer Active Directory user, group, and computer objects, OUs, group membership, and delegated permissions within approved access boundaries; coordinate routine account lifecycle fulfillment with the IT Service Desk.
Troubleshoot domain authentication, account lockouts, domain joining, and hybrid identity synchronization issues with Infrastructure and Information Security.
Create, configure, test, deploy, and maintain Group Policy Objects, including links, scope, security filtering, inheritance, and approved user and computer settings.
Investigate Group Policy processing failures and conflicting settings; maintain policy documentation, backups, and rollback plans through established change control.
Review stale AD objects and outdated or duplicate GPOs; coordinate approved cleanup and migration of applicable settings to Intune while preventing conflicting policy enforcement.
Support Microsoft Entra ID, MFA, Conditional Access, security groups, device registration, and device-based access requirements within assigned responsibilities.
Apply least-privilege, role-based access, separation-of-duties, and documented change-control practices.
Partner with Information Security to remediate endpoint vulnerabilities and implement approved Microsoft 365 and endpoint security controls.
Serve as a technical escalation point for the Omni Service Desk, property IT teams, and other support resources.
Support a geographically distributed, 24x7 hospitality environment where technology availability may affect hotel operations, associate productivity, and guest service.
Coordinate deployments, troubleshoot cross-platform issues, and implement approved changes with Infrastructure and IT Security while minimizing disruption across corporate offices, hotels, and resorts.
Create knowledge articles, support procedures, configuration standards, and technical documentation.
Participate in incident, problem, change, request, and major-incident management processes.
Provide scheduled on-call or after-hours support for critical incidents, maintenance, and production changes when required.
Provide day-to-day supervision of one Microsoft 365 Administrator, including work prioritization, technical guidance, and support coverage coordination.
Recommend and implement improvements to Microsoft 365, Intune, Autopilot, and endpoint management.
Develop repeatable standards that improve security, reliability, automation, and the associate technology experience.
Use PowerShell and Microsoft Graph where appropriate to automate administration, reporting, and remediation.
Evaluate new Microsoft capabilities and provide practical recommendations aligned with Omni business and support requirements.