Endpoint Administrator

The City of Chaska is seeking a knowledgeable and motivated Endpoint Administrator to manage and support our modern endpoint management environment. This position plays a key role in maintaining a secure, efficient, and cloud‑first technology infrastructure by administering Microsoft Entra ID, Microsoft Intune, Windows Autopilot, and Apple Business Manager. As the Endpoint Administrator, you will be responsible for the secure configuration, deployment, and lifecycle management of Windows, macOS, and mobile devices. This includes zero‑touch device provisioning, software deployment, patch management, endpoint security, and user lifecycle management. If you enjoy leveraging technology to improve organizational efficiency, strengthen security, and provide exceptional support, we encourage you to apply. Identity & Access Management Manage user accounts, groups, licensing, and access in Microsoft Entra ID. Handle user provisioning, deprovisioning, and lifecycle processes. Configure and enforce conditional access policies and multi‑factor authentication. Endpoint Management (Intune, Autopilot & Apple Business Manager) Administer Microsoft Intune for device enrollment, configuration profiles, compliance policies, and security baselines. Manage Windows Autopilot Zero‑touch deployment, including device registration/import, profile creation and assignment, and deployment troubleshooting. Manage Apple Business Manager for macOS and iOS device enrollment and supervision. Deploy, update, retire, and troubleshoot managed devices across Windows, macOS, and mobile platforms using modern provisioning methods. Software & Patch Management Deploy and manage applications (Win32, Microsoft Store, LOB, etc.) through Intune. Oversee Windows Update for Business policies and ensure timely patching of all endpoints. Maintain software inventory and license compliance. Endpoint Support & Troubleshooting Provide Tier 2/3 technical support for endpoint hardware and software issues. Troubleshoot Entra ID join, Intune enrollment, Autopilot provisioning, device sync, and application deployment problems. Resolve user access and device‑related incidents efficiently. Security & Compliance Monitor endpoint security alerts and ensure devices meet organizational compliance standards. Assist with security audits and reporting. Documentation & Process Improvement Maintain up‑to‑date documentation for configurations, processes, and procedures (including Autopilot profiles and deployment workflows). Contribute to the continuous improvement of endpoint management standards and automation. Train end users and team members on new tools and processes. Additional Duties Participate in on‑call rotation as required. Collaborate with other IT staff on broader infrastructure and security projects. Perform other related duties as assigned. Education and Experience Valid driver’s license. Ability to report to Chaska City Hall within 1 hour in emergency situations during on‑call schedule. Associate degree in information technology or computer science field and three years of experience in desktop/endpoint support. One year of experience with Microsoft Entra ID, Intune, Windows Autopilot, and mobile device management. Bachelor degree in information technology or computer science field preferred. Other Required Knowledge, Skills, and Abilities Strong troubleshooting and problem‑solving skills in a mixed‑device environment, including Autopilot deployments. Solid understanding of endpoint security best practices. Demonstrated customer service skill desired. Strong knowledge of Microsoft Entra ID and hybrid identity. Microsoft Intune device and application management expertise. Windows Autopilot configuration, deployment, and troubleshooting. Apple Business Manager and macOS management abilities. Windows 10/11 deployment and update strategies. Preferred Certifications Microsoft Certified: Endpoint Administrator Associate (MD‑102). Microsoft Certified: Identity and Access Administrator Associate. Apple Certified Support Professional (ACSP). CompTIA A+, Network+, Security+. Equipment Used Computer hardware and software, test equipment, basic tools, cables. Telephone. Printers. Hard hat, safety vest. Mental Effort Critical thinking. Learn new computer programs; understand updates; write procedures. Understand and communicate with employees and the public. Physical Requirements Kneel, bend, lift, carry up to 50 pounds. Sit/stand desk. View computer screen for extended periods of time. Ability to work at heights and in confined spaces. Working Conditions General office environment. Occasional driving to and from work sites. #J-18808-Ljbffr