Systems Administrator-Endpoint Operations

Job description

software deployment, and endpoint standards. * Maintain workstation lifecycle processes including provisioning, deployment, refresh, and retirement. * Support endpoint configuration baselines, security policies, and hardening initiatives. Patch Management * Own patch management processes for Windows servers and workstations. * Coordinate testing, deployment, validation, and reporting of operating system and application updates. * Monitor patch compliance against defined SLAs. * Schedule and execute maintenance windows with minimal business disruption. * Support emergency and out-of-band patching for critical vulnerabilities. Vulnerability Management * Monitor vulnerability scanning platforms and remediation dashboards. * Triage vulnerabilities based on severity, exploitability, and business risk. * Coordinate remediation activities with infrastructure, networking, application owners, and vendors. * Track remediation progress and maintain exception documentation. * Produce vulnerability and remediation metrics for leadership and compliance reporting. RMM & Monitoring * Administer Remote Monitoring and Management (RMM) platforms. * Develop monitoring standards and alerting thresholds. * Investigate recurring alerts and eliminate noise through automation and process improvements. * Create automated remediation workflows where appropriate. * Monitor endpoint health, software inventory, disk utilization, service status, and system performance. Security Operations Support * Assist with endpoint security tools including Microsoft Defender, SentinelOne, FortiClient, and related technologies. * Investigate endpoint security alerts and coordinate escalation when required. * Support audits, compliance initiatives, and security assessments. * Maintain endpoint security baselines and enforce remediation activities. Asset & CMDB Management * Maintain accurate endpoint inventory and asset records. * Reconcile data across Intune, Active Directory, Entra ID, RMM, vulnerability scanners, and CMDB platforms. * Ensure endpoint ownership, lifecycle status, and configuration data remain current. * Identify and resolve discrepancies in asset records. Documentation & Process Improvement * Develop and maintain operational runbooks and support documentation. * Identify opportunities for automation using PowerShell and other scripting tools. * Create dashboards and reporting to improve visibility into endpoint health and compliance. * Continuously improve endpoint management processes and operational efficiency. Required Qualifications * 5+ years of experience in systems administration, endpoint administration, or infrastructure operations within a Windows-based enterprise environment. * Experience managing Windows desktop environments. * Experience with Microsoft Intune and Entra ID. * Experience with patch management platforms and methodologies. * Experience administering or supporting vulnerability management programs. * Familiarity with endpoint security platforms. * Strong troubleshooting and root-cause analysis skills. * Experience with PowerShell scripting and automation. * Strong documentation and organizational skills. Preferred Qualifications * Experience with endpoint management, RMM, and vulnerability management platforms such as Microsoft Intune, NinjaOne, ConnectWise RMM, Tenable, Rapid7, Microsoft Defender Vulnerability Management, or similar solutions. * Experience with Microsoft Defender for Endpoint, SentinelOne, FortiClient EMS, Windows Autopilot, and Freshservice CMDB. * Experience working in manufacturing or multi-site enterprise environments. * Experience supporting cybersecurity initiatives aligned with CMMC, NIST, CIS Controls, or similar frameworks.