Here's a brief overview of the tasks and responsibilities you'll be able to do:

Responsibilities

- Administer and evolve the Microsoft Intune environment (Endpoint Manager)
- Centrally manage Windows desktop and mobile devices
- Define, deploy, and maintain device configuration profiles, security policies, and compliance mechanisms
- Automate desktop provisioning, configuration, and preparation using Windows Autopilot
- Standardize the deployment of applications, configurations, and installation packages
- Plan and supervise the deployment of Windows updates, security patches and workstation upgrades
- Develop PowerShell scripts to automate administration, configuration, deployment, and remediation tasks
- Implement mechanisms for the detection and automated correction of non-compliant configurations
- Participate in the reinforcement and standardization of workstation security
- Analyze deployment, configuration and compliance issues and apply the required patches
- Maintain technical documentation related to configurations, policies, applications, and postage management processes
- Administer Microsoft Active Directory, Microsoft Entra ID, Microsoft 365, Microsoft Azure and Windows Server environments
- Manage accounts, groups, roles, permissions, and authentication mechanisms, including MFA, SSO, and Conditional Access
- Perform maintenance, updating, monitoring and automation of systems
- Take charge of level 2 and 3 incidents and requests and support teams in the resolution of complex issues
- Diagnose issues related to workstations, access, applications and cloud services
- Identify recurring problems and implement permanent or automated solutions




- Document procedures and solutions to promote knowledge sharing
- Collaborate with external vendors when required
- Participate in the security of systems, identities, workstations and cloud services
- Apply cybersecurity best practices in Microsoft environments
- Contribute to identity and access management in a manner that respects the principle of least privilege
- Support the deployment and administration of endpoint protection solutions
- Analyze security alerts, fix vulnerabilities and participate in incident response
- Implement recommendations from audits, vulnerability scans and security assessments
- Drive continuous improvement of cybersecurity controls

Profile you are looking for

- Hold a degree in computer science, information technology, cybersecurity or a related field
- Have relevant experience in systems administration in a Microsoft workplace
- Master Microsoft Intune (Endpoint Manager) and the administration of a fleet of workstations
- Demonstrate experience in automating the deployment and configuration of Windows desktops
- Be familiar with Windows Autopilot and modern desktop management practices
- Use PowerShell for IT administration and automation
- Experience in automated deployment of applications, configurations,



and security patches
- Understand Microsoft Active Directory, GPOs, and Microsoft Entra ID
- Be proficient in the core components of Microsoft Azure and Microsoft 365, including Exchange Online, SharePoint Online, Teams and OneDrive
- Develop a good understanding of Windows and Windows Server environments
- Have experience in cybersecurity, particularly in securing Microsoft environments and workstations
- Apply identity and access management principles
- Resolve level 2 and 3 technical incidents rigorously and efficiently
- Demonstrate a strong orientation towards automation, standardization and continuous improvement
- Demonstrate excellent analytical, diagnostic and problem-solving skills
- Identify recurring tasks and propose automated solutions
- Work independently while managing multiple priorities simultaneously
- Collaborate effectively with support teams and clearly communicate technical solutions
- Maintain a constant focus on security, compliance and quality of IT services
- Knowledge of Microsoft Defender for Endpoint and other Microsoft Defender solutions (an asset)
- Experience with Intune security and compliance policies (an asset)
- Proficiency in hybrid Active Directory and Entra ID environments (an asset)
- Experience with vulnerability management (an asset)
- Knowledge of SIEM and security monitoring tools (an asset)
- Understand CIS Controls and NIST repositories (an asset)
- Proficient in networking concepts such as TCP/IP, DNS, DHCP, VPN and firewall (an asset)
- Knowledge of ITIL practices and an ITSM platform is an asset

📌 System Administrator - Intune (Montreal)
🏢 COFOMO
📍 Montreal