Systems Engineer

Beltmann Relocation Group•Roseville, MN

14d•$72,046 - $108,071

About The Position

The Systems Engineer role involves administering and maintaining a wide range of IT systems and infrastructure. This includes managing endpoint devices through Microsoft Intune, ensuring cybersecurity best practices, administering Active Directory and Microsoft 365, supporting virtual environments, managing patching and applications, coordinating with network service providers, and leveraging PowerShell for automation. The position requires strong technical skills, problem-solving abilities, and effective communication to manage projects and support internal and external stakeholders.

Requirements

Strong verbal and written communication skills.
Experience with strategic thinking and future planning while also being able to provide tactical assistance.
Hands-on experience with Microsoft Intune policies, configuration profiles, compliance policies, application deployment, and Windows Update management.
Experience with Windows Autopilot, including an understanding of Hybrid Autopilot and Entra ID joined deployments.
Experience managing Windows 10/11 endpoints.
Experience managing iOS/iPadOS and Android devices through an enterprise MDM platform.
Working knowledge of PowerShell scripting and automation.
Experience with Active Directory, Group Policy, and Microsoft Entra ID.
Experience administering Microsoft 365 and Exchange Online.
Experience with Nutanix, VMware, or comparable enterprise virtualization technologies.
Working knowledge of networking, VPNs, DNS, DHCP, firewalls, and enterprise network infrastructure.
Understanding of cybersecurity principles, endpoint security, least privilege, vulnerability remediation, and system hardening.
Experience with operating system and third-party application patch management.
Strong troubleshooting, documentation, and communication skills.
Ability to independently manage technical projects and work effectively with MSPs, vendors, internal IT teams, and end users.
Bachelor’s degree (B. A.) or equivalent in computer science, information technology, computer engineering, or a related field or, relevant experience.
Minimum of 4 years of professional IT experience in systems administration, endpoint administration, infrastructure, technical support, or a related IT role.
Minimum of 2 years of hands-on Microsoft Intune experience managing devices in a production environment.

Nice To Haves

Apple Business Manager experience.
Android Enterprise device-management experience.
Microsoft Defender for Endpoint experience.
BitLocker and Windows security-baseline management.
Advanced PowerShell scripting and automation.
Experience with hybrid Microsoft environments.
Experience migrating workloads, policies, or devices to Microsoft Intune.
Experience supporting enterprise virtualization and Windows Server environments.
Experience participating in cybersecurity remediation.

Responsibilities

Administer and maintain Microsoft Intune for Windows, iOS, and Android devices, including enrollment, provisioning, configuration profiles, compliance policies, security policies, and device restrictions.
Manage Windows Update policies, update rings, feature updates, quality updates, and endpoint patching.
Package, deploy, update, and troubleshoot applications through Intune.
Manage device groups, assignments, filters, and deployment targeting.
Troubleshoot device enrollment, synchronization, compliance, application deployment, and configuration issues.
Administer iOS/iPadOS and Android devices through Microsoft Intune, managing mobile application deployment and configuration.
Support Apple Business Manager and Android Enterprise environments.
Maintain mobile device compliance, security, configuration, and application policies.
Troubleshoot mobile enrollment, application, licensing, and device-management issues.
Apply cybersecurity best practices across endpoints, servers, identities, and cloud services.
Administer endpoint security controls including Microsoft Defender technologies, BitLocker, Windows Firewall, and security baselines.
Review and implement security recommendations and remediation activities.
Assist with vulnerability remediation, security assessments, and penetration-testing findings.
Maintain secure endpoint configurations while balancing security requirements with business needs.
Administer and troubleshoot Microsoft Active Directory, managing users, computers, groups, organizational units, and Group Policy.
Support hybrid Active Directory and Microsoft Entra ID environments.
Administer Microsoft 365, Exchange Online, Microsoft Teams, and Entra ID, managing users, licensing, shared mailboxes, distribution groups, and permissions.
Troubleshoot authentication, access, licensing, and Microsoft 365 service issues.
Administer and support Nutanix and VMware virtual infrastructure, including creating, configuring, maintaining, and troubleshooting virtual machines.
Assist with Windows Server administration, server upgrades, maintenance, and troubleshooting.
Coordinate infrastructure maintenance while minimizing business disruption.
Manage Windows operating system and third-party application patching, monitor patch compliance, and remediate devices that fail to update.
Coordinate application upgrades and deployments, and test updates and configuration changes prior to production deployment.
Assist with organization-wide Windows upgrades and migrations.
Work directly with networking MSPs and vendors to maintain and improve network infrastructure.
Coordinate network, firewall, wireless, and infrastructure upgrades.
Administer and troubleshoot VPN and remote-access solutions.
Assist with DNS, DHCP, routing, firewall, wireless, and general connectivity troubleshooting.
Coordinate technical changes and troubleshooting between internal IT and external service providers.
Develop and maintain PowerShell scripts for system administration and endpoint management.
Deploy PowerShell scripts and remediation tasks through Microsoft Intune.
Automate repetitive administrative tasks, reporting, configuration changes, and troubleshooting.
Utilize PowerShell for Microsoft 365, Active Directory, Entra ID, Exchange Online, and endpoint administration.