Endpoint Administrator

Omega Morgan believes that each employee makes a significant contribution to our success. That contribution should not be limited by the assigned responsibilities. Therefore, this position description is designed to outline primary duties, qualifications, and job scope, but not limit the individual nor the organization to just the work identified. It is our expectation that each employee will offer his/her services wherever and whenever necessary to ensure the success of our endeavors.

The Endpoint Administrator owns the operational lifecycle of company endpoints and the technology aspects of employee onboarding and offboarding. This role is responsible for ensuring laptops, desktops, mobile devices, shared workstations, and related peripherals are securely standardized, provisioned, maintained, supported, recovered, and retired. The Endpoint Administrator works closely with Human Resources, hiring managers, IT support, security, and infrastructure teams to deliver a consistent employee technology experience while maintaining accurate asset and access records.

Essential Duties and Responsibilities

• Own the complete lifecycle of company endpoints, including standards, procurement coordination, receiving, staging, deployment, assignment, support, reassignment, refresh, recovery, and secure retirement or disposal.
• Administer endpoint management, remote monitoring and management, deployment, and mobile device management platforms; maintain device enrollment, configuration profiles, policies, and compliance rules.
• Provision laptops, desktops, mobile devices, shared workstations, and peripherals using standardized builds, required applications, security controls, and role-based configurations.
• Coordinate and execute employee onboarding by preparing equipment, accounts, licenses, group memberships, applications, and access in partnership with Human Resources and hiring managers.
• Coordinate and execute employee offboarding by disabling access, reclaiming equipment and licenses, preserving or transferring business data as authorized, documenting disposition, and securely wiping devices for reuse or disposal.
• Maintain accurate endpoint and asset records, including assigned user, location, serial number, model, warranty, configuration, status, and planned replacement date.
• Manage operating system, application, driver, BIOS, and firmware patching; monitor compliance and remediate devices that fall outside established security or maintenance standards.
• Implement and maintain endpoint security controls, including encryption, endpoint protection, local administrator restrictions, screen-lock standards, and secure configuration baselines.
• Package, test, deploy, update, and remove business applications while supporting software licensing, standardization, and compatibility requirements.
• Troubleshoot endpoint, peripheral, profile, performance, connectivity, and application issues; identify root causes and coordinate vendor repair or replacement when necessary.
• Maintain ready-to-deploy inventory and forecast endpoint refresh, warranty, and accessory needs to support timely onboarding, replacements, and business growth.
• Create and maintain endpoint standards, onboarding and offboarding checklists, support documentation, knowledge articles, and audit-ready records; report on fleet health, patch compliance, inventory accuracy, and lifecycle status.

Required Skills

• Strong endpoint troubleshooting and problem-solving skills across hardware, operating systems, applications, user profiles, peripherals, and connectivity
• Ability to organize and execute time-sensitive onboarding, offboarding, deployment, and device-recovery activities with a high degree of accuracy
• Working knowledge of endpoint management, RMM, software deployment, patching, encryption, endpoint security, and remote support technologies
• Strong customer service and communication skills, including the ability to explain technical information clearly to employees and managers
• Ability to create and maintain clear procedures, checklists, asset records, and technical documentation
• Strong attention to detail, ownership, discretion, and sound judgment when handling company devices, employee data, credentials, and access

Required Experience and/or Education

• Three or more years of experience in endpoint administration, desktop engineering, IT support, systems administration, or a related role
• Demonstrated experience provisioning, managing, troubleshooting, and retiring Windows 10/11 endpoints in a corporate environment
• Experience with Microsoft 365, Entra ID, Active Directory, Group Policy, and role-based user and device provisioning
• Experience with endpoint management, RMM, deployment, or mobile device management platforms; Microsoft Intune and Windows Autopilot experience is preferred
• Experience with application packaging and deployment, patch management, disk encryption, endpoint protection, and security compliance remediation
• Experience maintaining hardware inventory, asset assignments, warranties, refresh schedules, and secure device disposition records
• Relevant certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, CompTIA A+, Network+, Security+, or equivalent practical experience preferred