About Us - Values Overview

Department Summary

CAS IT champions, builds, and applies technology to help UNT advance education, creativity, and research. Benefits include:
• Flexible hours and remote work arrangements
• UNT scholarship (roughly 66% savings!) for employee and immediate family
• 36 days PTO with yearly accrual for vacation/sick
• Clear and reasonable work priorities
• Transparent leadership

Position Overview

This position serves as a technical resource within Academic Technologies IT Infrastructure, supporting the administration, security, automation, and lifecycle management of Windows endpoints across university academic and administrative environments. Working as part of a team, the position supports devices used by faculty, staff, students, classrooms, laboratories, research facilities, and specialized academic computing environments.

Responsibilities include deploying, configuring, maintaining, and troubleshooting Windows endpoints using technologies such as Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, Microsoft Entra ID, Active Directory, PowerShell, and Microsoft Graph.

The position plays an important role in the transition from MECM/SCCM and traditional imaging to modern, cloud-based endpoint management through Microsoft Intune, with an emphasis on automated provisioning, application deployment, security compliance, and endpoint lifecycle management.

Additionally, the position develops and supports automation solutions to improve operational efficiency, endpoint security, and reliability while collaborating with university IT teams, faculty, researchers, and vendors to address technical challenges and support institutional needs.

Minimum Qualifications

Bachelor's degree in related field and four years of related computing work experience; or any equivalent combination of education, training and experience.

Knowledge, Skills and Abilities

Endpoint Management: Understanding of Windows device lifecycle management, including provisioning, deployment, maintenance, upgrades, retirement, and secure decommissioning.

Application and Update Management: Ability to package, deploy, update, and troubleshoot Windows applications using Intune and MECM/SCCM, along with managing operating system updates, drivers, and phased deployments.

Scripting and Automation: Ability to develop and maintain PowerShell scripts for endpoint configuration, software deployment, automated remediation, and reporting.
Endpoint Security: Knowledge of security best practices, including least privilege, BitLocker, Windows LAPS, Windows Firewall, Secure Boot, vulnerability remediation, and Zero Trust principles.

Identity and Access Management: Familiarity with Microsoft Entra ID, Active Directory, device identities, Group Policy, security groups, and endpoint administrative-access controls.

Monitoring and Troubleshooting: Ability to analyze endpoint inventory, deployment, compliance, and security data; troubleshoot hardware, software, authentication, and configuration issues; and assist with endpoint reporting and analytics.

Documentation and Collaboration: Ability to maintain technical documentation, standard operating procedures, and change records while collaborating effectively with university IT teams and stakeholders.

Preferred Qualifications

Preferred qualifications include experience or familiarity with enterprise Windows endpoint management, including Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, and device lifecycle management. Knowledge of PowerShell scripting, automation, configuration management, and automated remediation is highly desirable.

Candidates should have familiarity with Microsoft Entra ID, Active Directory, device identities, security groups, and access management, as well as endpoint security technologies and practices such as BitLocker, Windows LAPS, security baselines, vulnerability remediation, endpoint privilege management, and Zero Trust principles.

Additional preferred experience includes:
Packaging, deploying, and maintaining Win32 applications across enterprise environments.
Managing Windows operating system updates, patching, and device provisioning.
Supporting migrations from MECM/SCCM to Microsoft Intune and other cloud-based endpoint management solutions.
Developing automation and remediation solutions using PowerShell, Microsoft Graph, or other APIs.
Using Rapid7 or comparable vulnerability-management platforms to identify and remediate security vulnerabilities.
Supporting specialized computing environments, including research systems, academic laboratories, and scientific instrumentation.
Participating in enterprise IT projects, following established service-management practices, and collaborating across technical teams.
Working in higher-education or similarly complex enterprise IT environments.

Required License/Registration/Certifications

Preferred certifications include Microsoft Certified: Endpoint Administrator Associate, Identity and Access Administrator Associate, and Azure Administrator Associate, or equivalent certifications.

Job Duties

• Endpoint Management and Administration Administer and maintain Windows endpoints using Microsoft Intune and Microsoft Configuration Manager (MECM/SCCM), with an emphasis on transitioning endpoint management from MECM to Intune and modern cloud-based management practices. 
• Device Provisioning and Lifecycle Management Deploy, configure, and manage Windows devices using Windows Autopilot and other approved provisioning technologies. 
• Application Packaging and Deployment Package, deploy, update, and troubleshoot applications using Intune, MECM/SCCM, and other enterprise software-management tools. Support the migration of application deployments from MECM to Intune. 
• Operating System Updates and Patch Management Manage Windows feature updates, quality updates, drivers, and deployment rings. 
• Endpoint Security and Compliance Maintain endpoint security controls, including Defender for Endpoint, BitLocker, Windows LAPS, and security baselines. Support vulnerability remediation and compliance monitoring. 
• PowerShell Scripting and Automation Develop and maintain scripts and automation for endpoint configuration, application deployment, remediation, and reporting. 
• Identity and Access Management Support endpoint identities and access controls using Microsoft Entra ID and Active Directory, including device joins, security groups, and administrative permissions. 
• Troubleshooting, Documentation, and Collaboration Troubleshoot endpoint issues, maintain technical documentation, and collaborate with university IT teams to support faculty, staff, students, classrooms, laboratories, and research environments. 

Physical Requirements

Communicating with others to exchange information.
Sedentary work that primarily involves sitting/standing.

Environmental Hazards

No adverse environmental conditions expected.

Work Schedule

M-F 8-5 (2 days remote)

Driving University Vehicle

No

Security Sensitive

This is a Security Sensitive Position.

Special Instructions

Applicants must submit a minimum of two professional references as part of their application. If needed, additional references can be added after the application has been submitted. 

Benefits

For information regarding our Benefits, click here.

EEO Statement

The University of North Texas System is firmly committed to equal opportunity and does not permit –and takes actions to prevent – discrimination, harassment (including sexual violence, domestic violence, dating violence and stalking), and retaliation on the basis of race, color, religion, national origin, sex, age, disability, genetic information, or veteran status in its application, employment practices, and facilities; nor permits race, color, national origin, religion, age, disability, veteran status, or sex discrimination and harassment in its admissions processes, and educational programs and activities. UNT System Administration promptly investigates complaints of discrimination, harassment, and related retaliation and takes remedial action when appropriate. System Administration also takes actions to prevent retaliation against individuals who oppose any form of harassment or discriminatory practice, file a charge or report, or testify, assist, or participate in a related investigation or proceeding.