This 6-month, contract-to-hire position has a hybrid schedule, with 3 days a week onsite in Richmond, VA.  This is a W2 position with benefits and PTO available during the contract period. 

Desired Skills and Qualifications

Core Endpoint Management Expertise

·       Advanced administration of Microsoft Configuration Manager (Current Branch) including site administration, client management, software distribution, operating system deployment, reporting, and troubleshooting.

·       Advanced administration of Microsoft Intune for Windows, iOS, Android, and macOS device management.

·       Experience with Microsoft Entra ID (Azure AD) device integration, identity management, application registrations, and cloud services.

·       Experience managing co-managed environments using Configuration Manager and Intune.

Software Update and Patch Management

·       Extensive experience managing Microsoft Configuration Manager Software Updates, including:

o   Software Update Points (SUP)

o   Automatic Deployment Rules (ADRs)

o   Software Update Groups (SUGs)

o   Deployment Packages

o   Maintenance Windows

o   Compliance Monitoring

o   Content Cleanup and Lifecycle Management

·       Experience administering Patch My PC in Configuration Manager and Intune environments.

·       Knowledge of Microsoft 365 Apps servicing and update management.

·       Experience monitoring monthly workstation and server patch deployments and remediation activities.

·       Ability to investigate and resolve update synchronization, deployment, and compliance issues.

Cloud and Hybrid Endpoint Management

·       Experience implementing and supporting Cloud Management Gateway (CMG).

·       Experience managing internet-facing devices and servers located within DMZ environments.

·       Understanding of hybrid and cloud-native endpoint management strategies.

·       Familiarity with Microsoft Entra ID tenant management, cloud service integrations, and application secret/certificate lifecycle management.

Security and PKI Administration

·       Strong knowledge of Public Key Infrastructure (PKI) concepts and certificate lifecycle management.

·       Experience operating Configuration Manager in HTTPS mode using internal Certificate Authorities.

·       Ability to manage certificate renewals, trusted root/intermediate certificates, and Distribution Point certificate requirements.

·       Experience supporting security hardening and vulnerability management initiatives.

·       Familiarity with Microsoft security and compliance best practices.

Operating System Deployment (OSD)

·       Experience creating, maintaining, and troubleshooting:

o   Task Sequences

o   Boot Images

o   Driver Packages

o   OS Images

o   Operating System Deployments

·       Experience updating Windows installation media and maintaining deployment readiness.

·       Experience supporting enterprise hardware lifecycle management and onboarding new device models.

·       Familiarity with Driver Automation Tool (DAT) and modern driver management methodologies.

Application Packaging and Deployment

·       Experience packaging and deploying applications using:

o   Microsoft Configuration Manager

o   Microsoft Intune

o   PSAppDeployToolkit (PSADT)

·       Ability to package Win32 applications and maintain deployment workflows.

·       Experience deploying third-party security and management tools such as:

o   SentinelOne

o   Tenable

o   BeyondTrust Jump Client

o   Sysmon

·       Ability to update task sequences and deployment strategies as application requirements evolve.

Endpoint Compliance and Device Management

·       Experience creating and maintaining:

o   Device Collections

o   Queries

o   Configuration Profiles

o   Compliance Policies

o   Assignment Filters

o   Dynamic Device Grouping

·       Experience supporting Windows, iOS, Android, and macOS platforms.

·       Understanding of Conditional Access and endpoint compliance concepts.

·       Experience monitoring deployment success and remediation efforts.

Microsoft Intune Administration

·       Administration of:

o   Configuration Profiles

o   Compliance Policies

o   Application Deployments

o   Platform Scripts

o   Proactive Remediations

o   Device Enrollment

o   Device Lifecycle Management

·       Experience managing Apple MDM integrations, including:

o   Apple Push Notification Service (APNs) certificates

o   Apple Business Manager (ABM)

o   Apple enrollment programs

·       Ability to maintain mobile device and endpoint management infrastructure.