Windows Endpoint Administrator

University of North Texas System•Denton, TX

1d•$69,768 - $69,768•Hybrid

About The Position

This position serves as a technical resource within Academic Technologies IT Infrastructure, supporting the administration, security, automation, and lifecycle management of Windows endpoints across university academic and administrative environments. The role supports devices used by faculty, staff, students, classrooms, laboratories, research facilities, and specialized academic computing environments. The position deploys, configures, maintains, and troubleshoots Windows endpoints using technologies including Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, Microsoft Entra ID, Active Directory, PowerShell, and Microsoft Graph. It supports the transition from MECM/SCCM and traditional imaging to modern, cloud-based endpoint management, emphasizing automated provisioning, application deployment, security compliance, and endpoint lifecycle management. The role also develops and supports automation to improve operational efficiency, endpoint security, and reliability, and collaborates with university IT teams, faculty, researchers, and vendors to address technical challenges and institutional needs.

Requirements

Bachelor's degree in a related field and four years of related computing work experience, or an equivalent combination of education, training, and experience.
Understanding of Windows device lifecycle management, including provisioning, deployment, maintenance, upgrades, retirement, and secure decommissioning.
Ability to package, deploy, update, and troubleshoot Windows applications using Intune and MECM/SCCM, and manage operating system updates, drivers, and phased deployments.
Ability to develop and maintain PowerShell scripts for endpoint configuration, software deployment, automated remediation, and reporting.
Knowledge of endpoint security practices, including least privilege, BitLocker, Windows LAPS, Windows Firewall, Secure Boot, vulnerability remediation, and Zero Trust principles.
Familiarity with Microsoft Entra ID, Active Directory, device identities, Group Policy, security groups, and endpoint administrative-access controls.
Ability to analyze endpoint inventory, deployment, compliance, and security data; troubleshoot hardware, software, authentication, and configuration issues; and assist with endpoint reporting and analytics.
Ability to maintain technical documentation, standard operating procedures, and change records while collaborating with university IT teams and stakeholders.

Nice To Haves

Experience or familiarity with enterprise Windows endpoint management, including Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, and device lifecycle management.
Knowledge of PowerShell scripting, automation, configuration management, and automated remediation.
Familiarity with Microsoft Entra ID, Active Directory, device identities, security groups, access management, and endpoint security technologies and practices such as BitLocker, Windows LAPS, security baselines, vulnerability remediation, endpoint privilege management, and Zero Trust principles.
Experience packaging, deploying, and maintaining Win32 applications in enterprise environments.
Experience managing Windows operating system updates, patching, and device provisioning.
Experience supporting migrations from MECM/SCCM to Microsoft Intune or other cloud-based endpoint management solutions.
Experience developing automation and remediation solutions using PowerShell, Microsoft Graph, or other APIs.
Experience using Rapid7 or comparable vulnerability-management platforms to identify and remediate security vulnerabilities.
Experience supporting specialized computing environments, including research systems, academic laboratories, and scientific instrumentation.
Experience participating in enterprise IT projects, following established service-management practices, and collaborating across technical teams.
Experience working in higher education or similarly complex enterprise IT environments.
Preferred certifications include Microsoft Certified: Endpoint Administrator Associate, Identity and Access Administrator Associate, and Azure Administrator Associate, or equivalent certifications.

Responsibilities

Administer and maintain Windows endpoints using Microsoft Intune and Microsoft Configuration Manager (MECM/SCCM), supporting the transition from MECM to Intune and modern cloud-based management practices.
Deploy, configure, and manage Windows devices using Windows Autopilot and other approved provisioning technologies.
Package, deploy, update, and troubleshoot applications using Intune, MECM/SCCM, and other enterprise software-management tools; support migration of application deployments from MECM to Intune.
Manage Windows feature updates, quality updates, drivers, and deployment rings.
Maintain endpoint security controls, including Defender for Endpoint, BitLocker, Windows LAPS, and security baselines; support vulnerability remediation and compliance monitoring.
Develop and maintain PowerShell scripts and automation for endpoint configuration, application deployment, remediation, and reporting.
Support endpoint identities and access controls using Microsoft Entra ID and Active Directory, including device joins, security groups, and administrative permissions.
Troubleshoot endpoint issues and maintain technical documentation.
Collaborate with university IT teams to support faculty, staff, students, classrooms, laboratories, and research environments.