Systems Administrator-Endpoint Operations & Security

Combined Metals Company, LLC•Hampshire, IL

About The Position

This role is responsible for administering and securing endpoints within a Windows-based enterprise environment. Key responsibilities include managing endpoint platforms, overseeing patch and vulnerability management, supporting security operations, maintaining asset records, and driving process improvements through automation and documentation.

Requirements

5+ years of experience in systems administration, endpoint administration, or infrastructure operations within a Windows-based enterprise environment.
Experience managing Windows desktop environments.
Experience with Microsoft Intune and Entra ID.
Experience with patch management platforms and methodologies.
Experience administering or supporting vulnerability management programs.
Familiarity with endpoint security platforms.
Strong troubleshooting and root-cause analysis skills.
Experience with PowerShell scripting and automation.
Strong documentation and organizational skills.

Nice To Haves

Experience with endpoint management, RMM, and vulnerability management platforms such as Microsoft Intune, NinjaOne, ConnectWise RMM, Tenable, Rapid7, Microsoft Defender Vulnerability Management, or similar solutions.
Experience with Microsoft Defender for Endpoint, SentinelOne, FortiClient EMS, Windows Autopilot, and Freshservice CMDB.
Experience working in manufacturing or multi-site enterprise environments.
Experience supporting cybersecurity initiatives aligned with CMMC, NIST, CIS Controls, or similar frameworks.

Responsibilities

Administer endpoint management platforms including Microsoft Intune, Windows Update for Business, RMM tools, and endpoint security solutions.
Manage device enrollment, compliance policies, software deployment, and endpoint standards.
Maintain workstation lifecycle processes including provisioning, deployment, refresh, and retirement.
Support endpoint configuration baselines, security policies, and hardening initiatives.
Own patch management processes for Windows servers and workstations.
Coordinate testing, deployment, validation, and reporting of operating system and application updates.
Monitor patch compliance against defined SLAs.
Schedule and execute maintenance windows with minimal business disruption.
Support emergency and out-of-band patching for critical vulnerabilities.
Monitor vulnerability scanning platforms and remediation dashboards.
Triage vulnerabilities based on severity, exploitability, and business risk.
Coordinate remediation activities with infrastructure, networking, application owners, and vendors.
Track remediation progress and maintain exception documentation.
Produce vulnerability and remediation metrics for leadership and compliance reporting.
Administer Remote Monitoring and Management (RMM) platforms.
Develop monitoring standards and alerting thresholds.
Investigate recurring alerts and eliminate noise through automation and process improvements.
Create automated remediation workflows where appropriate.
Monitor endpoint health, software inventory, disk utilization, service status, and system performance.
Assist with endpoint security tools including Microsoft Defender, SentinelOne, FortiClient, and related technologies.
Investigate endpoint security alerts and coordinate escalation when required.
Support audits, compliance initiatives, and security assessments.
Maintain endpoint security baselines and enforce remediation activities.
Maintain accurate endpoint inventory and asset records.
Reconcile data across Intune, Active Directory, Entra ID, RMM, vulnerability scanners, and CMDB platforms.
Ensure endpoint ownership, lifecycle status, and configuration data remain current.
Identify and resolve discrepancies in asset records.
Develop and maintain operational runbooks and support documentation.
Identify opportunities for automation using PowerShell and other scripting tools.
Create dashboards and reporting to improve visibility into endpoint health and compliance.
Continuously improve endpoint management processes and operational efficiency.