This 6-month, contract-to-hire position has a hybrid schedule, with 3 days a week onsite in Richmond, VA. This is a W2 position with benefits and PTO available during the contract period.
Desired Skills and Qualifications
Core Endpoint Management Expertise
· Advanced administration of Microsoft Configuration Manager (Current Branch) including site administration, client management, software distribution, operating system deployment, reporting, and troubleshooting.
· Advanced administration of Microsoft Intune for Windows, iOS, Android, and macOS device management.
· Experience with Microsoft Entra ID (Azure AD) device integration, identity management, application registrations, and cloud services.
· Experience managing co-managed environments using Configuration Manager and Intune.
Software Update and Patch Management
· Extensive experience managing Microsoft Configuration Manager Software Updates, including:
o Software Update Points (SUP)
o Automatic Deployment Rules (ADRs)
o Software Update Groups (SUGs)
o Deployment Packages
o Maintenance Windows
o Compliance Monitoring
o Content Cleanup and Lifecycle Management
· Experience administering Patch My PC in Configuration Manager and Intune environments.
· Knowledge of Microsoft 365 Apps servicing and update management.
· Experience monitoring monthly workstation and server patch deployments and remediation activities.
· Ability to investigate and resolve update synchronization, deployment, and compliance issues.
Cloud and Hybrid Endpoint Management
· Experience implementing and supporting Cloud Management Gateway (CMG).
· Experience managing internet-facing devices and servers located within DMZ environments.
· Understanding of hybrid and cloud-native endpoint management strategies.
· Familiarity with Microsoft Entra ID tenant management, cloud service integrations, and application secret/certificate lifecycle management.
Security and PKI Administration
· Strong knowledge of Public Key Infrastructure (PKI) concepts and certificate lifecycle management.
· Experience operating Configuration Manager in HTTPS mode using internal Certificate Authorities.
· Ability to manage certificate renewals, trusted root/intermediate certificates, and Distribution Point certificate requirements.
· Experience supporting security hardening and vulnerability management initiatives.
· Familiarity with Microsoft security and compliance best practices.
Operating System Deployment (OSD)
· Experience creating, maintaining, and troubleshooting:
o Task Sequences
o Boot Images
o Driver Packages
o OS Images
o Operating System Deployments
· Experience updating Windows installation media and maintaining deployment readiness.
· Experience supporting enterprise hardware lifecycle management and onboarding new device models.
· Familiarity with Driver Automation Tool (DAT) and modern driver management methodologies.
Application Packaging and Deployment
· Experience packaging and deploying applications using:
o Microsoft Configuration Manager
o Microsoft Intune
o PSAppDeployToolkit (PSADT)
· Ability to package Win32 applications and maintain deployment workflows.
· Experience deploying third-party security and management tools such as:
o SentinelOne
o Tenable
o BeyondTrust Jump Client
o Sysmon
· Ability to update task sequences and deployment strategies as application requirements evolve.
Endpoint Compliance and Device Management
· Experience creating and maintaining:
o Device Collections
o Queries
o Configuration Profiles
o Compliance Policies
o Assignment Filters
o Dynamic Device Grouping
· Experience supporting Windows, iOS, Android, and macOS platforms.
· Understanding of Conditional Access and endpoint compliance concepts.
· Experience monitoring deployment success and remediation efforts.
Microsoft Intune Administration
· Administration of:
o Configuration Profiles
o Compliance Policies
o Application Deployments
o Platform Scripts
o Proactive Remediations
o Device Enrollment
o Device Lifecycle Management
· Experience managing Apple MDM integrations, including:
o Apple Push Notification Service (APNs) certificates
o Apple Business Manager (ABM)
o Apple enrollment programs
· Ability to maintain mobile device and endpoint management infrastructure.
