System Admin

Intune / Mobile Device Management AdministratorThe Intune / Mobile Device Management Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems, focusing on endpoint security, mobile device lifecycle management, and compliance. This role is responsible for operating and maintaining Microsoft Intune, Endpoint Manager, and related MDM infrastructure to ensure secure, reliable, and compliant device management in alignment with DOE directives and federal IT standards. The ideal candidate will have strong expertise in mobile device management, policy enforcement, and automation, while supporting hybrid environments and evolving enterprise service delivery models.Responsibilities include:Administer and maintain Microsoft Intune / Endpoint Manager, including device enrollment, compliance policies, configuration profiles, and application deployment.Manage Windows, macOS, iOS, and Android endpoints, ensuring secure baselines and compliance with organizational policies.Implement and enforce conditional access, MFA, and mobile security policies through Azure AD and Intune.Support BYOD and corporate-owned device programs, ensuring proper separation of personal and corporate data.Provide Tier III support for endpoint troubleshooting, enrollment issues, and policy conflicts.Oversee the provisioning, deployment, and retirement of mobile devices across the enterprise.Maintain accurate records of device inventories, compliance status, and lifecycle tracking.Support application packaging and deployment for mobile platforms.Collaborate with cybersecurity teams to remediate vulnerabilities identified through mobile compliance gaps.Continuously monitor endpoint health, compliance, and Intune infrastructure performance.Generate and deliver compliance and audit reports to leadership and stakeholders.Detect and resolve device compliance failures, policy conflicts, and outages in line with SLAs.Track and report on license utilization, resource consumption, and Intune/Azure cost usage.Maintain and update the Configuration Management Database (CMDB) with endpoint and Intune configuration items.Submit all changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process.Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines.Document and maintain Intune policies, SOPs, and configuration records, reviewed quarterly or after major changes.Minimum Qualifications:Bachelor's Degree in Information Technology, Computer Science or a related field or equivalent relevant experience; Master's Degree preferred.Demonstrated technical proficiency equivalent to industry-recognized certifications, such as: CompTIA Security+ or Network+5 + years of relevant work experience.Other Job Specific Skills:Vendor-specific certifications in mobile security or endpoint platforms.Proficiency in PowerShell scripting, Azure CLI, and automation tools for Intune and endpoint management.Strong knowledge of Intune, Azure AD, conditional access, and mobile device security frameworks.Ability to support Windows, macOS, iOS, and Android endpoints.Familiarity with federal IT compliance standards (e.g., FISMA, NIST SP 800-53).Preferred Skills:Experience with hybrid endpoint management (Intune + SCCM).Familiarity with mobile application management (MAM) and mobile threat defense integrations.Strong troubleshooting skills for device enrollment, compliance failures, and policy conflicts.Excellent documentation and communication skills for compliance reporting and operational transparency.Knowledge of federal government IT best practices and standards.Ability to work under federal IT security protocols and procedures.Compensation Ranges:Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.EEO Requirements:It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.Physical Requirements:The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.Disclaimer:The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.