Application Administrator

Department Innovation and Technology Department Salary: $81,226.00 - $116,762.94 Welcome Welcome to the City of Charlotte Charlotte is America’s Queen City, opening her arms to a diverse and inclusive community of residents, businesses and visitors alike. Here you will find a safe, family-oriented city where people work together to help everyone thrive. The mission of the City of Charlotte is to deliver quality public services and promote the safety, health, and quality of life for all residents. Our guiding principles include: Attracting and retaining a skilled and diverse workforce Valuing teamwork, openness, accountability, productivity, and employee development Providing all customers with courteous, responsive, accessible, and seamless quality services Taking initiative to identify, analyze, and solve problems Collaborating with stakeholders to make informed decisions Summary We are looking for a skilled Unified Endpoint Engineer specializing in Microsoft Endpoint Configuration Manager (MECM/SCCM), Microsoft Intune, and related endpoint technologies to support and enhance the City's enterprise Unified Endpoint Management (UEM) environment. This position is part of a team responsible for engineering, implementing, maintaining, and supporting endpoint management solutions across a large enterprise environment. The Unified Endpoint Engineer will support the lifecycle of Windows endpoints, including operating system provisioning and upgrades, application deployment, patch management, configuration management, automation, security compliance, and troubleshooting. The position will also support the City's continued adoption of Microsoft Intune, co-management, modern provisioning, and mobile device management technologies. Major Duties and Responsibilities Administer, maintain, and enhance enterprise endpoint management solutions using Microsoft Endpoint Configuration Manager (MECM/SCCM), Microsoft Intune, and related technologies. Engineer and support Windows 11 provisioning, operating system deployment, feature upgrades, configuration management, and device lifecycle processes across the enterprise. Package, test, deploy, maintain, and troubleshoot enterprise applications using MECM/SCCM, Intune, PowerShell, and other endpoint management technologies. Coordinate and execute monthly Windows security patching and endpoint remediation activities, including testing, deployment, troubleshooting, compliance monitoring, and resolution of deployment failures. Develop, maintain, test, and troubleshoot PowerShell scripts and other automation used for endpoint administration, software deployment, configuration management, reporting, and remediation. Configure, test, deploy, and maintain Group Policy Objects (GPOs), endpoint configuration policies, compliance policies, and related controls in accordance with enterprise standards and security requirements. Support Microsoft Intune and co-management capabilities, including device enrollment, configuration profiles, compliance policies, application deployment, and migration of endpoint management capabilities to modern management platforms. Monitor endpoint health, deployment status, patch compliance, configuration compliance, and other operational metrics; investigate issues and implement corrective actions as needed. Troubleshoot complex Windows endpoint issues involving operating systems, applications, registry settings, services, file systems, Active Directory, Group Policy, networking, security controls, and endpoint management technologies. Support endpoint security and vulnerability management activities by implementing approved security configurations, remediating vulnerabilities, and assisting with zero-trust, PCI, and other enterprise security requirements. Support management of mobile and Apple devices using technologies such as Microsoft Intune, Apple Business Manager, Mobile Device Management (MDM), and Mobile Application Management (MAM). Participate in testing and implementation of endpoint changes through established change management processes, including documenting changes, evaluating implementation impacts, coordinating deployments, and supporting rollback or remediation activities when necessary. Participate in endpoint technology projects and coordinate technical activities with Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, departmental IT liaisons, vendors, and other stakeholders. Create and maintain technical documentation, operational procedures, deployment documentation, troubleshooting guides, and knowledge articles supporting endpoint management services. Provide technical guidance and assistance to Service Desk personnel, departmental technology staff, other UEM team members, and internal customers regarding endpoint management technologies and issues. Evaluate endpoint management technologies and identify opportunities to improve automation, reliability, security, user experience, and operational efficiency. Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency. Knowledge, Skills & Abilities Strong working knowledge of Microsoft Endpoint Configuration Manager (MECM/SCCM) and enterprise endpoint management concepts. Experience with Microsoft Intune and an understanding of co-management between MECM/SCCM and Intune. Experience with Windows 10/11 operating system deployment, provisioning, feature upgrades, patching, application deployment, and endpoint configuration management. Experience packaging, testing, deploying, and troubleshooting Windows applications in an enterprise environment. Proficiency with PowerShell scripting for endpoint administration, automation, troubleshooting, and remediation. Working knowledge of Windows operating system components including registry, services, file systems, security, and operating system configuration. Experience administering and troubleshooting Active Directory and Group Policy Objects (GPOs). Knowledge of Microsoft Entra ID and its relationship to enterprise endpoint management and device identity. Working knowledge of networking concepts including DNS, DHCP, TCP/IP, and endpoint connectivity troubleshooting. Understanding of endpoint security, vulnerability management, secure configuration, compliance policies, and data protection practices. Experience using endpoint reporting, monitoring, and analytics to identify deployment, compliance, performance, and operational issues. Knowledge of Microsoft Intune device enrollment, configuration profiles, compliance policies, application management, and related modern management capabilities. Familiarity with Apple Business Manager, iOS, Android, macOS, MDM, and MAM technologies. Ability to troubleshoot complex technical problems, identify root causes, and implement effective solutions. Ability to manage multiple assignments and technical initiatives while coordinating effectively with infrastructure, security, service desk, application, and departmental stakeholders. Strong customer service, communication, documentation, and organizational skills with the ability to communicate effectively with technical and non-technical audiences. Ability to work effectively as part of a technical engineering team while independently managing assigned responsibilities. Required Qualifications Three (3) or more years of progressively responsible IT experience involving enterprise endpoint management, systems administration, desktop engineering, or related technologies. Hands‑on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in an enterprise environment. Experience supporting Windows 10/11 endpoint lifecycle activities, including operating system deployment or provisioning, patch management, software deployment, and troubleshooting. Experience packaging, deploying, and troubleshooting enterprise Windows applications. Experience using PowerShell for systems administration, endpoint management, automation, or troubleshooting. Experience administering or supporting Active Directory and Group Policy in an enterprise environment. Working knowledge of enterprise endpoint security, configuration management, and vulnerability remediation practices. Experience troubleshooting endpoint issues across Windows operating systems, applications, networking, identity, and endpoint management technologies. Preferred Qualifications Five (5) or more years of well‑rounded IT experience, preferably in a large enterprise environment supporting 5,000+ users. Experience administering Microsoft Intune, co‑management, Windows Autopilot, and Microsoft Entra ID. Experience managing mobile devices using MDM/MAM technologies and Apple Business Manager. Experience with Endpoint Analytics, proactive remediations, compliance reporting, patch reporting, and endpoint operational metrics. Experience supporting enterprise Windows operating system upgrades or large‑scale endpoint transformation initiatives. Experience implementing endpoint configurations supporting PCI or other industry security and compliance requirements. Microsoft certifications related to Endpoint Administration, Intune, Microsoft 365, Azure/Entra, or related technologies are preferred; no professional license or certification is required. Experience using AI‑assisted administrative tools, such as Microsoft Copilot or ChatGPT Enterprise, to improve scripting, documentation, troubleshooting, or operational efficiency is desirable. Minimum Education and Experience High School Graduate or Equivalent and five (5) years of related work experience; OR Two-Year College Degree and Three (3) years of related work experience; OR Bachelor's Level Degree and one (1) year of related work experience; OR Master's Level Degree; OR An equivalent combination of education and relevant experience that provides the knowledge, skills, and abilities necessary to successfully perform the essential job duties. The City’s Background Check Policy requires background checks to be conducted on final internal or external candidate(s) applying for any position with the City of Charlotte. The type of information that will be collected as part of a background check includes, but is not limited to: reference checks, social security verification, education verification, criminal conviction record check, and, if applicable, a credit history check, sex offender registry and motor vehicle records check. Background checks must be in compliance with all federal and state statutes, such as the Fair Credit Reporting Act (FCRA). The checks must be consistent with the guidelines set forth by these laws requiring organizations to obtain a candidate’s written authorization before obtaining a criminal background report, motor vehicle records check or credit report; and to properly store and dispose of information derived from such reports. Final candidates must pass a pre-employment drug‑screening test and physical examination. During the selection process, candidates may be asked to take a skills test, and/or participate in other assessments. The City of Charlotte is an Equal Opportunity Employer and does not unlawfully discriminate on the basis of race, religion, color, sex, national origin, marital status, age, disability, sexual orientation, political affiliation or on the basis of actual or perceived gender as expressed through dress, appearance, or behavior. Our culture is to serve the community honorably. The City of Charlotte is committed to making our services and programs accessible to all. Benefits The City of Charlotte provides a comprehensive benefits package to eligible employees. The City of Charlotte is a drug and alcohol‑free workplace. The City of Charlotte has more than 8,000 employees working across 19 departments to serve close to 1 million residents. From public safety and clean water to transportation, housing and an international airport, our teams deliver essential services to keep Charlotte connected, safe and empowered with opportunity for all. When you join the City of Charlotte, you become part of Team Charlotte — a dedicated group of professionals working together to make a meaningful impact on our community and its future. The City of Charlotte has more than 8,000 employees working across 19 departments to serve close to 1 million residents. From public safety and clean water to transportation, housing and an international airport, our teams deliver essential services to keep Charlotte connected, safe and empowered with opportunity for all. We are guided by a clear mission: to be committed to exceptional service every day. No matter the department or role, every team member plays a part in helping our city grow, thrive and meet the needs of those who rely on us. We’re a values-driven organization, working collaboratively, acting with integrity and delivering reliable results. We embrace a forward-thinking mindset, encouraging curiosity, innovation and continuous improvement. The City of Charlotte is committed to making our services and programs accessible to all. To make a request, please fill out the Innovation & Technology ADA request form or call View phone number on click.appcast.io. #J-18808-Ljbffr