The Intune & M365 Administrator is responsible for the implementation, administration, and ongoing management of MS Intune and related M365 security policies across ProMach's 60+ global subsidiaries. This role will collaborate with the Corp IT team to ensure the M365 tenant is in alignment with security best practices. In addition, this position is a key contributor in departmental projects and provides second tier support and training for all technology related issues and inquiries, coordinating with appropriate support departments as necessary. This position reports to the Sr. Director of Corporate IT Operations and will be a hybrid role, based partially in Covington, Kentucky. Does this work interest you? - Microsoft Intune Ownership - Implementation & Ongoing Administration - Conditional Access Administration - Endpoint Security Baseline Policies - Windows OS Security Patching - Application Deployments - Microsoft Defender Administration Support, (policies, tagging, etc.) - M365 Tenant Security Configuration, (Best Practices, Microsoft Secure Score, etc.) - Azure / M365 Security Monitoring / Incident Response - Microsoft Purview Data Loss Prevention, (participates in initial planning and implementation) - Develops and maintains Metrics for M365 & Intune - Assists with acquisition onboarding process, (email migrations, tool deployments, etc.) - Tracks IT Security Incidents in ITSM tool, (ServiceNow) - Assists with maintenance of IT security policies and related procedures. - Assists with general Windows Server, Active Directory, Azure, & O365 support and administration. - Participates in routine server maintenance and assists with recurring Disaster Recovery tests. - Participates in internal and external IT audits and assessments - Performs second level support for incidents escalated by team members. - Fosters and maintains key vendor / 3rd party service and support relationships. - Performs other duties as assigned. What's in it for you? There's no monopoly on good ideas or limits to how far you can advance with our team. We offer an open, communicative environment that fosters individual initiative. We pride ourselves in being a company where people are happy and choose to build a career. In addition to growth opportunities, as a ProMach employee, you receive more than just a paycheck. Total compensation includes your salary, comprehensive medical/dental programs, as well as life insurance, a generous paid time off program, and a retirement savings plan with a company match. And because we understand the importance of feeling protected, there is no waiting period for benefits - you are eligible on your first day of employment! If this sounds like you, we want to connect! - Bachelor's degree in Information Systems or similar area of technical study; or equivalent combination of education and experience - 5+ years of experience in the Information Technology field - Advanced proficiency with Microsoft Intune administration, (enrollment, compliance, conditional access, config profiles, software deployments, update rings, etc.) - Experience assessing and configuring M365 security to recognize best-practice baselines (Microsoft Secure Score, etc.) - Experience with endpoint hardening, encryption (BitLocker), Active Directory, NTFS security, and Group Policy. - Experience with application packaging and deployment. - Experience with PowerShell and the Microsoft Graph API for automation and reporting. - Experience with MS Defender for Endpoint policy administration - Experience with MS Purview or similar DLP solution is desirable. - Experience with MFA solutions, (Duo or similar) - Familiarity with Azure Arc for server onboarding and management. - Familiarity with enterprise SIEM solutions, (MS Sentinel or similar) - Familiarity with one or more IT security frameworks, (NIST, ISO, COBIT, MITRE, etc.) - Ability to communicate with associates at all levels of the organization - Strong written communications skills with experience writing technical documentation - Motivated, committed and energetic self-starter dedicated to providing high quality and responsive IT service - Availability to work evenings and weekends, sometimes with little notice. - Willingness to travel if needed < 5%