******Unless specifically contracted, resumes from recruiting agencies are not being accepted for this position.******
We are seeking an IT Operations Engineer to provide advanced technical support and to serve as the primary escalation point for complex issues across the organization. This role includes ownership of endpoint engineering, identity and access management, automation, and documentation standards. The role will lead deployment initiatives, drive root-cause analysis, and work closely with Network, Security, and Systems teams to continuously improve service quality and user experience.
Build and maintain Windows images, Microsoft Autopilot deployments, hardened configurations, and supporting automation scripts.
Manage Microsoft Intune or Tanium configuration profiles, compliance policies, update rings, device categories, dynamic groups, and application packaging, testing, and staged deployments.
Administer Azure Active Directory, Entra ID, and on-premises Active Directory, including user lifecycle management, hybrid configurations, and automation of identity processes using PowerShell.
Configure and maintain Conditional Access, multifactor authentication, and device compliance policies while collaborating with the Security team on access reviews, policy changes, and incident response procedures.
Develop, maintain, and review PowerShell automation for provisioning, inventory, compliance, and remediation, and maintain standard operating procedures, runbooks, and knowledge base articles.
Participate in change management activities including impact analysis, testing, documentation, and post-implementation evaluations.
Serve as an escalation point for Level 1 and Level 2 support teams, troubleshooting advanced incidents across endpoints, identity systems, collaboration tools, and network or remote access.
Provide advanced support for Microsoft 365, Zoom, Teams Phone, and meeting room technologies, including root-cause analysis and corrective and preventive action documentation.
Diagnose and resolve endpoint networking issues including Domain Name System, Dynamic Host Configuration Protocol, virtual private networks, wireless networks, and proxy systems, and address cross-platform performance issues involving endpoints, identity, and cloud systems.
Lead deployment initiatives such as device refresh programs, operating system and application upgrades, configuration rollouts, and pilot programs, while managing vendor escalations, licensing, feature rollouts, and return material authorizations.
Maintain configuration management database accuracy and manage hardware lifecycle from procurement through decommissioning, while generating operational metrics including service level agreement performance, ticket trends, and compliance reporting.
Bachelor’s degree or equivalent professional experience.
3+ years experience in endpoint and systems support, including configuration management and application packaging.
3+ years experience in identity and access lifecycle management.
Expertise with Windows 10/11, Microsoft 365, Apple iOS, and modern endpoint hardware (Dell, HP, Poly, Zoom Room systems).
Proficiency with Microsoft Intune, Microsoft Endpoint Manager, or Tanium.
Experience with Azure Active Directory, Entra ID, and Active Directory.
Strong understanding of networking fundamentals (DNS, DHCP, VPN, wireless networks, proxy technologies).
PowerShell scripting and experience with version control (Git preferred).
Strong analytical and advanced troubleshooting skills.
Excellent communication with both technical and non‑technical audiences.
Ability to work independently, prioritize tasks, and lead technical initiatives.
Effective collaborator with the ability to work across teams.
The expected salary range for this position is between $90,000 and $110,000. The actual compensation will be based on factors such as scope and responsibilities of the position, candidate's work experience, education/training, job-related skills, internal peer equity, market and business considerations and other factors permitted by law.
