Systems Administrator – Endpoint, Identity

This is a fully remote position, open to applicants in Connecticut.

📋 Description

• Oversee Microsoft 365 tenant services, which include Exchange Online, SharePoint/OneDrive, and Teams.

• Manage Microsoft Intune across both Windows and macOS platforms, covering enrollment, configuration and compliance policies, application deployment, patch rings, and updates.

• Implement zero-touch provisioning using Windows Autopilot and Apple Business Manager.

• Ensure standardized device builds and minimize configuration drift.

• Coordinate endpoint hardware logistics, procurement, drop-shipping, RMAs, and secure device returns or disposal.

• Manage Entra ID users, groups, roles, licensing, SSO integrations, and application registrations.

• Design, test, deploy, and optimize Conditional Access and multi-factor authentication policies.

• Carry out identity lifecycle management for onboarding, role changes, and revoking access during offboarding.

• Enforce least-privilege and role-based access, along with conducting periodic access reviews.

• Maintain endpoint controls that support HIPAA Security Rule safeguards.

• Enforce encryption protocols such as BitLocker and FileVault, and manage key escrow and recovery processes.

• Implement data loss prevention and device compliance policies to protect PHI.

• Execute remote lock and wipe functions and assist with incident response and breach investigations.

• Apply endpoint security baselines and address vulnerability findings.

• Maintain documentation and generate evidence for HIPAA audits, risk assessments, SOC 2 reviews, and customer security questionnaires.

• Provide advanced remote desktop support for issues affecting Windows and macOS.

• Manage support tickets in accordance with service level agreements while communicating effectively with non-technical staff.

• Develop standard operating procedures (SOPs), runbooks, internal documentation, and knowledge base articles.

• Write and read PowerShell scripts to automate administrative tasks.

• Track hardware, software, and license inventory throughout the asset lifecycle.

• Collaborate with Network Engineering, Security, and Application teams.

• Offer technical insight and recommendations to team members.

• Perform maintenance, patching, and incident response outside of regular hours as required.

⛳️ Requirements

• 3–6 years of experience in IT systems administration, including hands-on management of Microsoft 365 and Microsoft Intune in a production setting.

• At least 3 years of experience as a direct technical point of contact for both internal and external customers.

• Proven desktop support experience on both Windows and macOS platforms.

• Functional understanding of HIPAA and the handling of Protected Health Information (PHI) in an end-user computing environment.

• Knowledge of DNS, DHCP, TCP/IP, VPN, and the ability to remotely diagnose home network and connectivity issues.

• Proficiency in reading and writing PowerShell scripts for administrative automation purposes.

• Strong written communication skills and self-directed work habits, demonstrating sound judgment on when to escalate issues.

• Experience with most of the specialized areas related to endpoint, identity, security, provisioning, SaaS governance, audit, and distributed workforce as mentioned in the job posting.

• Microsoft MD-102 certification or over 3 years of practical endpoint administration experience.

• Preferred certifications include Microsoft SC-300, Microsoft AZ-104, or Apple Certified Support Professional.

• Must be a U.S. citizen living in the continental United States.

• Should maintain an appropriate home work environment equipped with reliable high-speed internet.

• Role primarily involves stationary work at a computer workstation with extended computer usage.

• Occasional lifting and handling of computer equipment weighing up to 25 pounds.

🏝️ Benefits

• Fully remote position.

• Some after-hours availability required for maintenance, patching, and incident response.

• Minimal travel is necessary.