5-8 years of experience with Microsoft enterprise technologies, particularly Microsoft 365 and Intune.
Proficient in Microsoft Entra ID, Exchange Online, Teams, SharePoint Online, and OneDrive.
Knowledge of MFA, Conditional Access, and endpoint security practices.
Strong troubleshooting and documentation skills with a focus on change management.
Ability to manage multiple projects and collaborate across various IT teams.
Excellent customer service and communication skills tailored for a hospitality setting.
Hands-on experience with Active Directory and Group Policy administration.
Responsibilities
Administer Microsoft 365 services including Exchange Online and Teams.
Manage user accounts, licenses, and service configurations.
Monitor service health and troubleshoot various application issues.
Oversee Microsoft Intune for device management across multiple platforms.
Implement and maintain security and compliance policies for devices.
Serve as a technical escalation point for IT support teams.
Develop and document operational standards and procedures.
Benefits
Opportunity for hands-on experience in a dynamic hospitality environment.
Collaborative work culture with cross-departmental interaction.
Potential for professional development and training in Microsoft technologies.
Involvement in continuous improvement initiatives for technology solutions.
Full Job Description
Position Summary
The Microsoft 365 & Endpoint Administrator administers, secures, supports, and continuously improves Omni Hotels & Resorts' Microsoft 365, Microsoft Intune, Active Directory (AD), and Group Policy environments. This in-office, hands-on role works closely with Infrastructure and IT Security to manage cloud collaboration services, endpoint configuration and compliance, application deployment, and identity-related administration across corporate offices, hotels, resorts, and remote associates. It serves as an escalation resource for IT Support Services and property IT teams and provides day-to-day oversight of one Microsoft 365 Administrator.
Responsibilities
Microsoft 365 Administration
Administer Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, Microsoft 365 Apps, and related tenant settings.
Manage users, groups, licenses, service configurations, and delegated administrative roles.
Monitor service health and troubleshoot authentication, licensing, mailbox, collaboration, and application issues.
Microsoft Intune & Endpoint Management
Administer Microsoft Intune for Omni-managed Windows, macOS, iOS, and Android devices.
Maintain enrollment, configuration, compliance, security, update, and device restriction policies.
Administer Windows Autopilot and standardized provisioning, reassignment, reset, retirement, and decommissioning processes.
Package, test, deploy, update, and retire applications through Intune and Company Portal.
Monitor device health, compliance, deployment results, unsupported operating systems, and stale device records.
Active Directory & Group Policy Administration
Administer AD user, group, and computer objects, organizational units (OUs), group membership, and delegated permissions within approved access boundaries; coordinate routine account lifecycle fulfillment with the IT Service Desk.
Troubleshoot domain authentication, account lockouts, domain-join, and hybrid identity synchronization issues in partnership with Infrastructure and Information Security.
Create, configure, test, deploy, and maintain Group Policy Objects (GPOs), including links, scope, security filtering, inheritance, and approved user and computer settings.
Investigate Group Policy processing failures and conflicting settings; maintain policy documentation, backups, and rollback plans through established change control.
Review stale AD objects and outdated or duplicate GPOs; coordinate approved cleanup and migration of applicable settings to Intune while preventing conflicting policy enforcement.
Identity, Access & Security
Support Microsoft Entra ID, MFA, Conditional Access, security groups, device registration, and device-based access requirements within assigned responsibilities.
Apply least-privilege, role-based access, separation-of-duties, and documented change-control practices.
Partner with Information Security to remediate endpoint vulnerabilities and implement approved Microsoft 365 and endpoint security controls.
Omni Support & Operations
Serve as a technical escalation point for the Omni Service Desk, property IT teams, and other support resources.
Support a geographically distributed, 24x7 hospitality environment where technology availability may directly affect hotel operations, associate productivity, and guest service.
Work closely with Infrastructure and IT Security to coordinate deployments, troubleshoot cross-platform issues, and implement approved changes with minimal disruption across corporate offices, hotels, and resorts.
Create knowledge articles, support procedures, configuration standards, and technical documentation.
Participate in Omni incident, problem, change, request, and major-incident management processes.
Provide scheduled on-call or after-hours support for critical incidents, maintenance, and production changes when required.
Provide day-to-day supervision of one Microsoft 365 Administrator, including work prioritization, technical guidance, and support coverage coordination.
Platform Design & Continuous Improvement
Recommend and implement improvements to Omni's Microsoft 365, Intune, Autopilot, and endpoint-management environment.
Develop repeatable standards that improve security, reliability, automation, and the associate technology experience.
Use PowerShell and Microsoft Graph where appropriate to automate administration, reporting, and remediation.
Evaluate new Microsoft capabilities and provide practical recommendations aligned with Omni business and support requirements.
Qualifications
5-8 years of progressive experience supporting Microsoft enterprise technologies, including hands-on Microsoft 365 and Microsoft Intune administration.
Working knowledge of Microsoft Entra ID, Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft 365 Apps, Windows 10/11, Windows Autopilot, device compliance, and application deployment.
Experience with MFA, Conditional Access, endpoint security, and role-based access control.
Strong troubleshooting, root-cause analysis, documentation, change-management, and organizational skills.
Ability to manage multiple technical initiatives, work independently, and collaborate across IT Support Services, Information Security, Infrastructure, application teams, vendors, and property IT.
Strong customer-service orientation and communication skills appropriate for Omni's hospitality environment.
Hands-on experience administering Active Directory objects, OUs, delegated permissions, and GPOs, including policy troubleshooting and hybrid identity support.
Preferred Qualifications
Microsoft O365 certification is required.
Experience supporting a multi-site enterprise, hotel, resort, retail, or other 24x7 customer-service environment.
Experience with Microsoft Graph, Apple Business Manager, Windows Update for Business, and Group Policy migration to modern management.
Experience with vulnerability-management and endpoint-security platforms used in an enterprise environment.
ITIL knowledge or experience with formal incident, problem, change, and request management.
Experience providing technical guidance or coordinating the work of other IT staff.
About Omni Hotels
Omni Hotels & Resorts is an American privately held, international luxury hotel company based in Dallas, Texas. The company was founded in 1958 as Dunfey Hotels, and operates 60 properties in the United States, Canada, and Mexico, totaling over 20,000 rooms and employing more than 23,000 people. The company is owned by Robert Rowling's TRT Holdings, who bought the company in 1996 from World International Holdings, Ltd. (WORLDHOTELS).
