Sr. Microsoft 365 & Endpoint Administrator

Omni Hotels & Spas•Dallas, TX

3d•Onsite

About The Position

The Microsoft 365 & Endpoint Administrator administers, secures, supports, and continuously improves Omni Hotels & Resorts’ Microsoft 365, Microsoft Intune, Active Directory, and Group Policy environments. This in-office, hands-on role works closely with Infrastructure and IT Security to manage cloud collaboration services, endpoint configuration and compliance, application deployment, and identity-related administration across corporate offices, hotels, resorts, and remote associates. The role serves as an escalation resource for IT Support Services and property IT teams and provides day-to-day oversight of one Microsoft 365 Administrator. The position supports a geographically distributed, 24x7 hospitality environment where technology availability may directly affect hotel operations, associate productivity, and guest service. It includes scheduled on-call or after-hours support for critical incidents, maintenance, and production changes when required, as well as participation in incident, problem, change, request, and major-incident management processes. The administrator recommends and implements improvements across Microsoft 365, Intune, Autopilot, and endpoint management; develops repeatable standards for security, reliability, automation, and associate experience; and uses PowerShell and Microsoft Graph where appropriate to automate administration, reporting, and remediation.

Requirements

5–8 years of progressive experience supporting Microsoft enterprise technologies, including hands-on Microsoft 365 and Microsoft Intune administration.
Working knowledge of Microsoft Entra ID, Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft 365 Apps, Windows 10/11, Windows Autopilot, device compliance, and application deployment.
Experience with MFA, Conditional Access, endpoint security, and role-based access control.
Strong troubleshooting, root-cause analysis, documentation, change-management, and organizational skills.
Ability to manage multiple technical initiatives, work independently, and collaborate across IT Support Services, Information Security, Infrastructure, application teams, vendors, and property IT.
Strong customer-service orientation and communication skills appropriate for a hospitality environment.
Hands-on experience administering Active Directory objects, OUs, delegated permissions, and GPOs, including policy troubleshooting and hybrid identity support.
Microsoft O365 certification is required.

Nice To Haves

Experience supporting a multi-site enterprise, hotel, resort, retail, or other 24x7 customer-service environment.
Experience with Microsoft Graph, Apple Business Manager, Windows Update for Business, and Group Policy migration to modern management.
Experience with vulnerability-management and endpoint-security platforms used in an enterprise environment.
ITIL knowledge or experience with formal incident, problem, change, and request management.
Experience providing technical guidance or coordinating the work of other IT staff.

Responsibilities

Administer Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft 365 Apps, and related tenant settings.
Manage users, groups, licenses, service configurations, and delegated administrative roles.
Monitor service health and troubleshoot authentication, licensing, mailbox, collaboration, and application issues.
Administer Microsoft Intune for Omni-managed Windows, macOS, iOS, and Android devices.
Maintain device enrollment, configuration, compliance, security, update, and restriction policies.
Administer Windows Autopilot and standardized device provisioning, reassignment, reset, retirement, and decommissioning processes.
Package, test, deploy, update, and retire applications through Intune and Company Portal.
Monitor device health, compliance, deployment results, unsupported operating systems, and stale device records.
Administer Active Directory user, group, and computer objects, organizational units, group membership, and delegated permissions within approved access boundaries; coordinate routine account lifecycle fulfillment with the IT Service Desk.
Troubleshoot domain authentication, account lockouts, domain-join, and hybrid identity synchronization issues in partnership with Infrastructure and Information Security.
Create, configure, test, deploy, and maintain Group Policy Objects, including links, scope, security filtering, inheritance, and approved user and computer settings.
Investigate Group Policy processing failures and conflicting settings; maintain policy documentation, backups, and rollback plans through established change control.
Review stale Active Directory objects and outdated or duplicate GPOs; coordinate approved cleanup and migration of applicable settings to Intune while preventing conflicting policy enforcement.
Support Microsoft Entra ID, MFA, Conditional Access, security groups, device registration, and device-based access requirements within assigned responsibilities.
Apply least-privilege, role-based access, separation-of-duties, and documented change-control practices.
Partner with Information Security to remediate endpoint vulnerabilities and implement approved Microsoft 365 and endpoint security controls.
Serve as a technical escalation point for the Omni Service Desk, property IT teams, and other support resources.
Coordinate deployments, troubleshoot cross-platform issues, and implement approved changes with Infrastructure and IT Security while minimizing disruption across corporate offices, hotels, and resorts.
Create knowledge articles, support procedures, configuration standards, and technical documentation.
Participate in Omni incident, problem, change, request, and major-incident management processes.
Provide scheduled on-call or after-hours support for critical incidents, maintenance, and production changes when required.
Provide day-to-day supervision of one Microsoft 365 Administrator, including work prioritization, technical guidance, and support coverage coordination.
Recommend and implement improvements to the Microsoft 365, Intune, Autopilot, and endpoint-management environment.
Develop repeatable standards that improve security, reliability, automation, and the associate technology experience.
Use PowerShell and Microsoft Graph where appropriate to automate administration, reporting, and remediation.
Evaluate new Microsoft capabilities and provide practical recommendations aligned with Omni business and support requirements.