System Administrator, Endpoint Management

Overview Since our founding in 1924, we've cut cardiovascular disease deaths in half, but there is still much more to do. We need passionate individuals like you to help accelerate progress and ensure a healthier future for all. We are seeking a skilled Endpoint Management System Administrator to support and operate a modern enterprise endpoint environment. This hands-on role administers and maintains enterprise endpoint management platforms, primarily Microsoft Intune and Tanium, to manage configuration, compliance, patching, and software deployments. The ideal candidate has strong experience managing Windows and macOS endpoints, working knowledge of Linux, and is comfortable performing daily administration tasks using Microsoft Intune and Tanium. Each platform is used for endpoint visibility, machine compliance, vulnerability remediation, software updates, and deployments. Jamf is also used to manage macOS systems. The Association offers resources to maintain work-life harmonization and access to Heart U, our corporate university, along with additional training and support. Responsibilities Administer and support enterprise endpoints across Windows desktops, servers, macOS, and Linux. Use Microsoft Intune and Tanium as primary endpoint management platforms for daily administration and operational management: Endpoint visibility and real-time inventory Machine compliance monitoring and enforcement Operating system and third-party software updates Software packaging, deployments, and remediation Vulnerability identification and remediation Manage Windows endpoints using Microsoft Intune and Group Policy Objects (GPO). Manage macOS endpoints using Jamf, including configuration profiles, policies, and application deployments. Execute and track vulnerability remediation efforts, ensuring timely patching and risk reduction across all endpoint platforms. Support and maintain enterprise cloud print solutions. Collaborate with cybersecurity, infrastructure, and service teams to align endpoint configurations with security standards and operational requirements. Implement and manage endpoint security baselines and configuration standards aligned with CIS Security Controls. Create and maintain documentation, standard operating procedures, and operational runbooks. Participate in continuous improvement initiatives focused on strengthening endpoint security, automation, and operational efficiency. Qualifications Bachelor's degree or equivalent experience. Minimum of three (3) years of relevant experience. Proven experience managing enterprise desktops and servers in a large-scale environment. Hands-on operational experience administering endpoints using Microsoft Intune. Strong working knowledge of Microsoft Intune (Windows endpoint management), Windows Autopilot, Group Policy (GPO), and Jamf (macOS management). Experience administering Windows desktop and server environments. Working knowledge of macOS and Linux administration. Demonstrated experience managing machine compliance, software patching, and vulnerability remediation. Strong troubleshooting skills and experience operating in a large, complex enterprise environment. Experience implementing or supporting device compliance policies and their integration with conditional access controls using Microsoft Intune and Microsoft Entra ID. Preferred Qualifications Hands-on experience using Tanium for endpoint management, compliance reporting, patching, and software deployment. Experience managing third-party application updates across diverse endpoint platforms. Familiarity with modern endpoint security concepts such as least privilege, zero trust, and compliance baselines. Experience supporting cloud-first or hybrid endpoint management strategies. Compensation & Benefits The expected pay range is $95,000–$105,000. Pay is commensurate with experience; geographic differentials may apply. The American Heart Association reserves the right to pay more or less than the posted range. Competitive base salary regularly reviewed against market value. Annual salary planning and incentive programs. Benefits including medical, dental, vision, disability, and life insurance, a retirement program with employer match, employee assistance and wellness programs, telemedicine, and medical consultation. Professional development through Heart U, Employee Resource Groups, and a mentoring program. Work-life harmonization: a minimum of 16 days paid time off for new employees, increasing with seniority, plus 12 paid holidays annually. Tuition assistance for further education related to duties or future positions. In accordance with local and state laws where applicable, qualified applicants with arrest or conviction records will be considered for employment. EOE/Protected Veterans/Persons with Disabilities. #J-18808-Ljbffr Reporter Newspapers