Endpoint Administrator

Endpoint Administrator

The City of Chaska is seeking a knowledgeable and motivated Endpoint Administrator to manage and support our modern endpoint management environment. This position plays a key role in maintaining a secure, efficient, and cloud-first technology infrastructure by administering Microsoft Entra ID, Microsoft Intune, Windows Autopilot, and Apple Business Manager.

As the Endpoint Administrator, you will be responsible for the secure configuration, deployment, and lifecycle management of Windows, macOS, and mobile devices. This includes zero-touch device provisioning, software deployment, patch management, endpoint security, and user lifecycle management. If you enjoy leveraging technology to improve organizational efficiency, strengthen security, and provide exceptional support, we encourage you to apply.

Responsibilities

Identity & Access Management

• Manage user accounts, groups, licensing, and access in Microsoft Entra ID.
• Handle user provisioning, deprovisioning, and lifecycle processes.
• Configure and enforce conditional access policies and multi-factor authentication.

Endpoint Management (Intune, Autopilot & Apple Business Manager)

• Administer Microsoft Intune for device enrollment, configuration profiles, compliance policies, and security baselines.

Manage Windows Autopilot

• Zero-touch deployment, including device registration/import, profile creation and assignment, and deployment troubleshooting.
• Manage Apple Business Manager for macOS and iOS device enrollment and supervision.
• Deploy, update, retire, and troubleshoot managed devices across Windows, macOS, and mobile platforms using modern provisioning methods.

Software & Patch Management

• Deploy and manage applications (Win32, Microsoft Store, LOB, etc.) through Intune.
• Oversee Windows Update for Business policies and ensure timely patching of all endpoints.
• Maintain software inventory and license compliance.

Endpoint Support & Troubleshooting

• Provide Tier 2/3 technical support for endpoint hardware and software issues.
• Troubleshoot Entra ID join, Intune enrollment, Autopilot provisioning, device sync, and application deployment problems.
• Resolve user access and device-related incidents efficiently.

Security & Compliance

• Monitor endpoint security alerts and ensure devices meet organizational compliance standards.
• Assist with security audits and reporting.

Documentation & Process Improvement

• Maintain up-to-date documentation for configurations, processes, and procedures (including Autopilot profiles and deployment workflows).
• Contribute to the continuous improvement of endpoint management standards and automation.
• Train end users and team members on new tools and processes.

Additional Duties

• Participate in on-call rotation as required.
• Collaborate with other IT staff on broader infrastructure and security projects.
• Perform other related duties as assigned.

Qualifications

Education and Experience

• Associates degree in information technology, computer science field and three years of experience desktop/endpoint support.
• 1 year of experience with the following: Microsoft Entra ID, Intune, Window's Autopilot, Mobile device management
• Bachelor degree in information technology, computer science field, preferred.

Other Required Knowledge, Skills, and Abilities

• Strong troubleshooting and problem-solving skills in a mixed-device environment, including Autopilot deployments
• Solid understanding of endpoint security best practices.
• Demonstrated customer service skill is desired
• Strong knowledge of Microsoft EntraID and hybrid identity
• Microsoft Intune device and application management
• Window's autopilot: configuration, deployment, and troubleshooting
• Apple Business Manager and macOS Management
• Windows 10/11 deployment and update strategies.

Preferred certifications:

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Identity and Access Administrator Associate
• Apple Certified Support Professional (ACSP)
• CompTIA A+, Network+, Security+

Equipment, Mental & Physical Demands

Equipment Used

• Computer hardware and software, test equipment, basic tools, cables
• Telephone
• Printers
• Hard hat, safety vest

Mental Effort

• Critical thinking
• Learn new computer programs; understand updates; write procedures
• Understand and communicate with employees and the public

Physical Requirements

• Kneel, bend, lift, carry up to 50 pounds
• Sit/stand desk
• View computer screen for extended periods of time
• Ability to work at heights and in confined spaces

Working Conditions

• General office environment
• Occasional driving to and from work sites