IT Operations Engineer

Responsibilities Build and maintain Windows images, Microsoft Autopilot deployments, hardened configurations, and supporting automation scripts. Manage Microsoft Intune or Tanium configuration profiles, compliance policies, update rings, device categories, dynamic groups, and application packaging, testing, and staged deployments. Administer Azure Active Directory, Entra ID, and on‑premises Active Directory, including user lifecycle management, hybrid configurations, and automation of identity processes using PowerShell. Configure and maintain Conditional Access, multifactor authentication, and device compliance policies while collaborating with the Security team on access reviews, policy changes, and incident response procedures. Develop, maintain, and review PowerShell automation for provisioning, inventory, compliance, and remediation, and maintain standard operating procedures, runbooks, and knowledge base articles. Participate in change management activities including impact analysis, testing, documentation, and post‑implementation evaluations. Serve as an escalation point for Level1 and Level2 support teams, troubleshooting advanced incidents across endpoints, identity systems, collaboration tools, and network or remote access. Provide advanced support for Microsoft365, Zoom, TeamsPhone, and meeting room technologies, including root‑cause analysis and corrective and preventive action documentation. Diagnose and resolve endpoint networking issues including DNS, DHCP, VPN, wireless networks, and proxy systems, and address cross‑platform performance issues involving endpoints, identity, and cloud systems. Lead deployment initiatives such as device refresh programs, operating system and application upgrades, configuration rollouts, and pilot programs, while managing vendor escalations, licensing, feature rollouts, and return material authorizations. Maintain configuration management database accuracy and manage hardware lifecycle from procurement through decommissioning, while generating operational metrics including service level agreement performance, ticket trends, and compliance reporting. Qualifications Bachelor’s degree or equivalent professional experience. 3+ years of experience in endpoint and systems support, including configuration management and application packaging. 3+ years of experience in identity and access lifecycle management. Expertise with Windows10/11, Microsoft365, Apple iOS, and modern endpoint hardware (Dell, HP, Poly, Zoom Room systems). Proficiency with Microsoft Intune, Microsoft Endpoint Manager, or Tanium. Experience with Azure Active Directory, Entra ID, and Active Directory. Strong understanding of networking fundamentals (DNS, DHCP, VPN, wireless networks, proxy technologies). PowerShell scripting and experience with version control (Git preferred). Strong analytical and advanced troubleshooting skills. Excellent communication with both technical and non‑technical audiences. Ability to work independently, prioritize tasks, and lead technical initiatives. Effective collaborator with the ability to work across teams. Preferred Certifications Microsoft365 Certified Endpoint Administrator or similar. Microsoft Azure Fundamentals. Information Technology Infrastructure Library (ITIL) Foundation. CompTIA Network+, with A+ or Microsoft Certified Professional considered a plus. The expected salary range for this position is between $90,000 and $110,000. The actual compensation will be based on factors such as scope and responsibilities of the position, candidate’s work experience, education/training, job‑related skills, internal peer equity, market and business considerations, and other factors permitted by law. Kimco Realty is an Equal Opportunity Employer – Veteran/Disability. #J-18808-Ljbffr