Own patch management for Windows systems and workstations.
Monitor and triage vulnerabilities with remediation coordination.
Administer RMM platforms and develop monitoring standards.
Support endpoint security tools and maintain security baselines.
Benefits
Flexible work arrangements.
Opportunities for professional development.
Access to the latest technologies and tools.
Collaborative work environment focused on continuous improvement.
Full Job Description
Key Responsibilities
Endpoint Management & Administration
Administer endpoint management platforms including Microsoft Intune, Windows Update for Business, RMM tools, and endpoint security solutions.
Manage device enrollment, compliance policies, software deployment, and endpoint standards.
Maintain workstation lifecycle processes including provisioning, deployment, refresh, and retirement.
Support endpoint configuration baselines, security policies, and hardening initiatives.
Patch Management
Own patch management processes for Windows servers and workstations.
Coordinate testing, deployment, validation, and reporting of operating system and application updates.
Monitor patch compliance against defined SLAs.
Schedule and execute maintenance windows with minimal business disruption.
Support emergency and out-of-band patching for critical vulnerabilities.
Vulnerability Management
Monitor vulnerability scanning platforms and remediation dashboards.
Triage vulnerabilities based on severity, exploitability, and business risk.
Coordinate remediation activities with infrastructure, networking, application owners, and vendors.
Track remediation progress and maintain exception documentation.
Produce vulnerability and remediation metrics for leadership and compliance reporting.
RMM & Monitoring
Administer Remote Monitoring and Management (RMM) platforms.
Develop monitoring standards and alerting thresholds.
Investigate recurring alerts and eliminate noise through automation and process improvements.
Create automated remediation workflows where appropriate.
Monitor endpoint health, software inventory, disk utilization, service status, and system performance.
Security Operations Support
Assist with endpoint security tools including Microsoft Defender, SentinelOne, FortiClient, and related technologies.
Investigate endpoint security alerts and coordinate escalation when required.
Support audits, compliance initiatives, and security assessments.
Maintain endpoint security baselines and enforce remediation activities.
Asset & CMDB Management
Maintain accurate endpoint inventory and asset records.
Reconcile data across Intune, Active Directory, Entra ID, RMM, vulnerability scanners, and CMDB platforms.
Ensure endpoint ownership, lifecycle status, and configuration data remain current.
Identify and resolve discrepancies in asset records.
Documentation & Process Improvement
Develop and maintain operational runbooks and support documentation.
Identify opportunities for automation using PowerShell and other scripting tools.
Create dashboards and reporting to improve visibility into endpoint health and compliance.
Continuously improve endpoint management processes and operational efficiency.
Required Qualifications
5+ years of experience in systems administration, endpoint administration, or infrastructure operations within a Windows-based enterprise environment.
Experience managing Windows desktop environments.
Experience with Microsoft Intune and Entra ID.
Experience with patch management platforms and methodologies.
Experience administering or supporting vulnerability management programs.
Familiarity with endpoint security platforms.
Strong troubleshooting and root-cause analysis skills.
Experience with PowerShell scripting and automation.
Strong documentation and organizational skills.
Preferred Qualifications
Experience with endpoint management, RMM, and vulnerability management platforms such as Microsoft Intune, NinjaOne, ConnectWise RMM, Tenable, Rapid7, Microsoft Defender Vulnerability Management, or similar solutions.
Experience with Microsoft Defender for Endpoint, SentinelOne, FortiClient EMS, Windows Autopilot, and Freshservice CMDB.
Experience working in manufacturing or multi-site enterprise environments.
Experience supporting cybersecurity initiatives aligned with CMMC, NIST, CIS Controls, or similar frameworks.
