Microsoft Intune / Endpoint Administrator (Contract)

Health Data Max provides a cloud-based clinical AI analytics platform for the US healthcare market. We issue Windows laptops to a distributed team and handle protected health information, so our devices must be centrally managed and secure. We need an experienced administrator to set up device management properly and then maintain it.

Key responsibilities

1. Initial setup

• Assess the current Microsoft 365, Entra ID, and Intune configuration and recommend a target design.
• Join all corporate Windows laptops to Microsoft Entra ID and enrol them in Intune.
• Recover and reset corporate laptops
• Configure Windows Autopilot so that new and reassigned laptops provision themselves.
• Set up BitLocker encryption with recovery key escrow and Windows LAPS.

2. Security and compliance

• Build device compliance and configuration policies and security baselines.
• Configure Conditional Access so that only compliant devices reach company data.
• Deploy Microsoft Defender for Endpoint and manage Windows updates.
• Align device controls with HIPAA requirements and document them for audits.

3. Ongoing administration

• Handle employee onboarding and offboarding: provisioning, access removal, remote wipe, and reassignment.
• Deploy and update standard applications.
• Monitor compliance reports and resolve device issues remotely.
• Maintain runbooks so that routine tasks can be performed by in-house staff.

Requirements

• 4+ years administering Microsoft Intune and Microsoft Entra ID for Windows devices.
• Hands-on experience with Windows Autopilot, remote wipe, and device recovery.
• Strong knowledge of compliance policies, Conditional Access, BitLocker, and Windows LAPS.
• Experience managing a fully remote device fleet without on-site access.
• PowerShell scripting for automation.
• Clear written documentation and good spoken English.

Preferred qualifications

• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102).
• Experience with Microsoft Defender for Endpoint and Microsoft Graph.
• Experience in a HIPAA, SOC 2, or similarly regulated environment.
• Experience supporting small companies or startups as a sole administrator.
• Broader Microsoft 365 administration (Exchange Online, Teams, SharePoint).

Key skills: Microsoft Intune, Microsoft Entra ID, Windows Autopilot, Endpoint Management, Conditional Access, BitLocker, Windows LAPS, Microsoft Defender, PowerShell, Microsoft 365 Administration