Endpoint Administrator – INTUNE / SCCM / TANIUM

• Minimum education: Higher Technician in Computer Systems Administration.
• Solid experience in endpoint administration and management in corporate environments.
• Microsoft Intune / Endpoint Manager, with advanced experience in:
• Device Enrollment.
• Configuration Profiles.
• Compliance Policies.
• Application Deployment.
• Reporting.
• Experience with Windows Autopilot.
• Experience in Co-management Intune + SCCM/Configuration Manager.
• Experience with Tanium.
• Knowledge of Entra ID (Azure AD).
• Experience in EDR solutions, especially CrowdStrike and Microsoft Defender for Endpoint.
• Experience with BitLocker and encryption policies.
• Experience with LAPS.
• Knowledge of endpoint security and hardening policies.
• Experience with Microsoft 365, especially Teams, OneDrive, and SharePoint.
• Solid knowledge of PowerShell for automation.
• Experience with Microsoft Graph API.
• Ability to prepare technical documentation and solution architectures.
• Experience in project management under Agile, ITIL, or similar methodologies.
• High English level, necessary to work in an international environment.
• High capacity for communication and relationship building with different stakeholders.

• SCCM / System Center Configuration Manager 2012.
• Certification MD-102 – Endpoint Administrator Associate.
• Certification AZ-900 – Microsoft Azure Fundamentals.
• Certification Tanium Certified Operator (TCO).

At AD4 Octógono we are looking for an Endpoint Administrator specialized in Microsoft environments and modern device management, to join an international project for a large company with a presence in different countries and centers.

The selected person will be responsible for the administration, monitoring, securing, and remediation of endpoints, working with technologies such as Microsoft Intune, SCCM/Configuration Manager, Autopilot, Tanium, Entra ID, and Microsoft Defender.

The position will have a strong technical component, oriented towards the resolution of complex incidents, automation via PowerShell, and participation in global transformation projects towards modern management models.

• Lead and execute endpoint compliance remediation initiatives in Europe, ensuring compliance with internal and regulatory standards.
• Administer Microsoft Intune (Endpoint Manager), including device enrollment, configuration profiles, compliance policies, application deployment, and reporting.
• Manage Windows Autopilot for the automation of device provisioning and lifecycle.
• Administer Co-management scenarios between Intune and SCCM/Configuration Manager, participating in the transition from traditional models towards modern management.
• Use Tanium for endpoint monitoring, compliance analysis, package deployment, and execution of remediations.
• Review dashboards, offline or unhealthy endpoints, and execute ad-hoc or scheduled queries via Tanium.
• Review and act upon security alerts and remediation processes.
• Administer Entra ID (Azure AD) in scenarios related to device management and identity.
• Participate in the implementation, configuration, troubleshooting, and remediation of EDR solutions, especially CrowdStrike and Microsoft Defender for Endpoint.
• Manage BitLocker policies, including configuration, deployment, encryption, and incident resolution.
• Administer LAPS, in both on-premise and cloud environments, ensuring secure and automated management of local administrator passwords.
• Implement and maintain endpoint security baselines and policies for device hardening and compliance.
• Administer and secure Microsoft 365 tools, especially Teams, OneDrive, and SharePoint.
• Develop advanced scripts in PowerShell to automate administration and remediation tasks.
• Use Microsoft Graph API for advanced automations and integrations.
• Act as an L3 escalation point for complex endpoint incidents, performing advanced analysis, troubleshooting, and resolution.
• Participate in global projects for the implementation of new endpoint management solutions and remediation strategies.
• Prepare technical documentation, reference architectures, diagrams, and runbooks.
• Collaborate with international teams and translate technical requirements to non-technical interlocutors.

Location: Madrid

Modality: Hybrid, 4 days of remote work and 1 day in-person in the office.

Schedule: 08:00 to 17:00 h.

Project: International, with scope across different countries and centers in Europe.

We are looking for a person:

• Proactive and autonomous.
• With a positive and active attitude.
• Oriented towards problem-solving.
• With advanced analysis and troubleshooting capacity.
• Accustomed to working in international environments.
• With good communication and stakeholder relationship skills.
• Oriented towards continuous improvement and automation.