Windows Endpoint Administrator

University of North Texas System • Denton, TX

6d • $69,768 • Hybrid

About The Position

This position serves as a technical resource within Academic Technologies IT Infrastructure, supporting administration, security, automation, and lifecycle management of Windows endpoints across university academic and administrative environments. As part of a team, the administrator supports devices used by faculty, staff, students, classrooms, laboratories, research facilities, and specialized academic computing environments.

The role deploys, configures, maintains, and troubleshoots Windows endpoints using Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, Microsoft Entra ID, Active Directory, PowerShell, and Microsoft Graph. It supports the transition from MECM/SCCM and traditional imaging to modern, cloud-based endpoint management through Intune, emphasizing automated provisioning, application deployment, security compliance, and endpoint lifecycle management. The position also develops automation to improve operational efficiency, endpoint security, and reliability, and collaborates with university IT teams, faculty, researchers, and vendors to address technical challenges and institutional needs.

The role is based in Denton and follows an M–F, 8–5 schedule, with two remote days. Physical requirements include communicating to exchange information and sedentary work primarily involving sitting or standing. No adverse environmental conditions are expected. This is a security-sensitive position.

Requirements

• Bachelor’s degree in a related field and four years of related computing work experience, or an equivalent combination of education, training, and experience.
• Understanding of Windows device lifecycle management, including provisioning, deployment, maintenance, upgrades, retirement, and secure decommissioning.
• Ability to package, deploy, update, and troubleshoot Windows applications using Intune and MECM/SCCM, and to manage operating system updates, drivers, and phased deployments.
• Ability to develop and maintain PowerShell scripts for endpoint configuration, software deployment, automated remediation, and reporting.
• Knowledge of endpoint security best practices, including least privilege, BitLocker, Windows LAPS, Windows Firewall, Secure Boot, vulnerability remediation, and Zero Trust principles.
• Familiarity with Microsoft Entra ID, Active Directory, device identities, Group Policy, security groups, and endpoint administrative-access controls.
• Ability to analyze endpoint inventory, deployment, compliance, and security data; troubleshoot hardware, software, authentication, and configuration issues; and assist with endpoint reporting and analytics.
• Ability to maintain technical documentation, standard operating procedures, and change records while collaborating effectively with university IT teams and stakeholders.

Nice To Haves

• Experience or familiarity with enterprise Windows endpoint management, including Microsoft Intune, MECM/SCCM, Windows Autopilot, and device lifecycle management.
• Knowledge of PowerShell scripting, automation, configuration management, and automated remediation.
• Familiarity with Microsoft Entra ID, Active Directory, device identities, security groups, access management, and endpoint security practices including BitLocker, Windows LAPS, security baselines, vulnerability remediation, endpoint privilege management, and Zero Trust principles.
• Experience packaging, deploying, and maintaining Win32 applications across enterprise environments.
• Experience managing Windows operating system updates, patching, and device provisioning.
• Experience supporting migrations from MECM/SCCM to Microsoft Intune and other cloud-based endpoint management solutions.
• Experience developing automation and remediation solutions using PowerShell, Microsoft Graph, or other APIs.
• Experience using Rapid7 or comparable vulnerability-management platforms to identify and remediate security vulnerabilities.
• Experience supporting specialized computing environments, including research systems, academic laboratories, and scientific instrumentation.
• Experience participating in enterprise IT projects, following established service-management practices, and collaborating across technical teams.
• Experience working in higher education or similarly complex enterprise IT environments.
• Microsoft Certified: Endpoint Administrator Associate, Identity and Access Administrator Associate, Azure Administrator Associate, or equivalent certifications.

Responsibilities

• Administer and maintain Windows endpoints using Microsoft Intune and MECM/SCCM, emphasizing transition to Intune and modern cloud-based management practices.
• Deploy, configure, and manage Windows devices using Windows Autopilot and other approved provisioning technologies.
• Package, deploy, update, and troubleshoot applications using Intune, MECM/SCCM, and other enterprise software-management tools; support migration of application deployments from MECM to Intune.
• Manage Windows feature updates, quality updates, drivers, and deployment rings.
• Maintain endpoint security controls, including Defender for Endpoint, BitLocker, Windows LAPS, and security baselines; support vulnerability remediation and compliance monitoring.
• Develop and maintain scripts and automation for endpoint configuration, application deployment, remediation, and reporting.
• Support endpoint identities and access controls using Microsoft Entra ID and Active Directory, including device joins, security groups, and administrative permissions.
• Troubleshoot endpoint issues and maintain technical documentation.
• Collaborate with university IT teams to support faculty, staff, students, classrooms, laboratories, and research environments.

Benefits

• Flexible hours and remote work arrangements.
• UNT scholarship for the employee and immediate family, described as roughly 66% savings.
• 36 days of PTO with yearly accrual for vacation and sick time.
• Clear and reasonable work priorities.
• Transparent leadership.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level