Systems Engineer

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following: ( Other duties may be assigned.)

Microsoft Intune & Endpoint Management

• Administer and maintain Microsoft Intune for Windows, iOS, and Android devices.
• Manage Windows device enrollment and provisioning using Windows Autopilot, including Hybrid Autopilot and Microsoft Entra ID joined environments.
• Create, deploy, maintain, and troubleshoot Intune configuration profiles, compliance policies, security policies, and device restrictions.
• Manage Windows Update policies, update rings, feature updates, quality updates, and endpoint patching.
• Package, deploy, update, and troubleshoot applications through Intune.
• Manage device groups, assignments, filters, and deployment targeting.
• Troubleshoot device enrollment, synchronization, compliance, application deployment, and configuration issues.

Mobile Device & Application Management

• Administer iOS/iPadOS and Android devices through Microsoft Intune.
• Manage mobile application deployment and configuration.
• Support Apple Business Manager and Android Enterprise environments.
• Maintain mobile device compliance, security, configuration, and application policies.
• Troubleshoot mobile enrollment, application, licensing, and device-management issues.

Cybersecurity & Endpoint Security

• Apply cybersecurity best practices across endpoints, servers, identities, and cloud services.
• Administer endpoint security controls including Microsoft Defender technologies, BitLocker, Windows Firewall, and security baselines.
• Review and implement security recommendations and remediation activities.
• Assist with vulnerability remediation, security assessments, and penetration-testing findings.
• Maintain secure endpoint configurations while balancing security requirements with business needs.

Active Directory & Microsoft 365

• Administer and troubleshoot Microsoft Active Directory.
• Manage users, computers, groups, organizational units, and Group Policy.
• Support hybrid Active Directory and Microsoft Entra ID environments.
• Administer Microsoft 365, Exchange Online, Microsoft Teams, and Entra ID.
• Manage users, licensing, shared mailboxes, distribution groups, and permissions.
• Troubleshoot authentication, access, licensing, and Microsoft 365 service issues.

Virtualization & Server Administration

• Administer and support Nutanix and VMware virtual infrastructure.
• Create, configure, maintain, and troubleshoot virtual machines.
• Assist with Windows Server administration, server upgrades, maintenance, and troubleshooting.
• Coordinate infrastructure maintenance while minimizing business disruption.

Patch & Application Management

• Manage Windows operating system and third-party application patching.
• Monitor endpoint patch compliance and remediate devices that fail to update.
• Coordinate application upgrades and deployments.
• Test updates and configuration changes prior to production deployment.
• Assist with organization-wide Windows upgrades and migrations.

Networking, VPN & MSP Coordination

• Work directly with networking MSPs and vendors to maintain and improve network infrastructure.
• Coordinate network, firewall, wireless, and infrastructure upgrades.
• Administer and troubleshoot VPN and remote-access solutions.
• Assist with DNS, DHCP, routing, firewall, wireless, and general connectivity troubleshooting.
• Coordinate technical changes and troubleshooting between internal IT and external service providers.

PowerShell & Automation

• Develop and maintain PowerShell scripts for system administration and endpoint management.
• Deploy PowerShell scripts and remediation tasks through Microsoft Intune.
• Automate repetitive administrative tasks, reporting, configuration changes, and troubleshooting.
• Utilize PowerShell for Microsoft 365, Active Directory, Entra ID, Exchange Online, and endpoint administration.

Minimum Qualifications

• Strong verbal and written communication skills.
• Experience with strategic thinking and future planning while also being able to provide tactical assistance.
• Hands-on experience with Microsoft Intune policies, configuration profiles, compliance policies, application deployment, and Windows Update management.
• Experience with Windows Autopilot, including an understanding of Hybrid Autopilot and Entra ID joined deployments.
• Experience managing Windows 10/11 endpoints.
• Experience managing iOS/iPadOS and Android devices through an enterprise MDM platform.
• Working knowledge of PowerShell scripting and automation.
• Experience with Active Directory, Group Policy, and Microsoft Entra ID.
• Experience administering Microsoft 365 and Exchange Online.
• Experience with Nutanix, VMware, or comparable enterprise virtualization technologies.
• Working knowledge of networking, VPNs, DNS, DHCP, firewalls, and enterprise network infrastructure.
• Understanding of cybersecurity principles, endpoint security, least privilege, vulnerability remediation, and system hardening.
• Experience with operating system and third-party application patch management.
• Strong troubleshooting, documentation, and communication skills.
• Ability to independently manage technical projects and work effectively with MSPs, vendors, internal IT teams, and end users.

QUALIFICATIONS

To perform this job successfully, a Systems Engineer typically include a combination of education, technical skills, and experience:

Proficiency in various technical areas, including:

• Apple Business Manager experience.
• Android Enterprise device-management experience.
• Microsoft Defender for Endpoint experience.
• BitLocker and Windows security-baseline management.
• Advanced PowerShell scripting and automation.
• Experience with hybrid Microsoft environments.
• Experience migrating workloads, policies, or devices to Microsoft Intune.
• Experience supporting enterprise virtualization and Windows Server environments.
• Experience participating in cybersecurity remediation

EXPERIENCE REQUIRED

• Bachelor’s degree (B. A.) or equivalent in computer science, information technology, computer engineering, or a related field or, relevant experience.
• Minimum of 4 years of professional IT experience in systems administration, endpoint administration, infrastructure, technical support, or a related IT role.
• Minimum of 2 years of hands-on Microsoft Intune experience managing devices in a production environment.

SUPERVISORY RESPONSIBILITIES

This job has no direct supervisory responsibilities but may lead other staff members as part of ongoing projects and technical support issues, as needed.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel; and talk or hear. The employee is occasionally required to stand and walk. The employee must occasionally lift and/or move up to 30 pounds. Specific vision abilities required by this job include close vision, color vision, and ability to adjust focus.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.

The noise level in the work environment is usually moderate.