Lead End User Support Engineer – Hybrid

Anoka County

. Engineer and administer Anoka County’s Windows endpoint platform .

Posted 10/27/2026full-timeAnoka • Minnesota • United StatesSenior💰 $79,789 - $111,696 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in administering Microsoft Configuration Manager, Microsoft Intune, and Active Directory in a hybrid environment, ensuring reliable and secure endpoint management. Proven ability to lead enterprise-level technology initiatives and provide escalated support for virtual desktop infrastructure.

Highest-signal resume keywords

Microsoft Configuration Manager AdministrationMicrosoft Intune AdministrationActive Directory ManagementVirtual Desktop Infrastructure SupportEndpoint Technology Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Enterprise AdministrationOperating System DeploymentApplication PackagingPowerShell ScriptingBitLocker ManagementDevice Join MethodsGroup Policy ManagementMFA ImplementationConfiguration ProfilesThird-Party Patching

Soft Skills

Technical CommunicationTraining and InstructionLeadershipMentoring

Tools & Technologies

Microsoft 365 AppsAzure Virtual DesktopCitrixVMware HorizonJamf Pro

Certifications & Qualifications

MD-102MS-102Jamf 200/300CompTIA A+Network+Security+ITIL Foundation

Industry Keywords

Endpoint ManagementHybrid Identity EnvironmentMobile Device ManagementEnterprise Technology InitiativesCompliance Standards

Tech Stack

Tools & technologies

AndroidAzureCitrixiOSJamfShell ScriptingVMware

About the role

Key responsibilities & impact

Engineer and administer Anoka County’s Windows endpoint platform
Support domain, directory, and authentication services
Administer Microsoft 365 client applications and services
Provide escalated support for virtual desktop infrastructure
Lead processes ensuring enterprise desktop engineering systems perform reliably, efficiently, and securely
Research and recommend emerging enterprise-level technologies
Lead technical discussions and recommend strategies for future end-user technology needs
Procure, design, develop, implement, and administer enterprise end-user technology
Lead enterprise project initiatives, including project plans, schedules, resource estimates, acceptance criteria, and handoff to operations
Identify endpoint-environment gaps and risks and lead remediation work
Establish policies, procedures, processes, and documentation for computers, mobile devices, operating systems, productivity applications, auditing, configuration management, anti-malware, patching, mobile device management, and virtual desktops
Define standards to keep systems functional, reliable, and secure
Act as an escalation point for complex technology issues in partnership with network and systems engineers
Ensure hardware/software maintenance and compliance with organizational security standards
Troubleshoot, diagnose, and resolve complex operating errors referred by the help desk
Provide leadership, coaching, mentoring, and potentially daily work direction to subordinate staff
Participate in a rotating on-call schedule, approximately one week every five weeks, providing after-hours and weekend support

Requirements

What you’ll need

Bachelor’s degree and at least 6 years (2,080 annual hours) of job-related experience
In lieu of the required education, an equivalent combination of education and experience may be substituted on a year-for-year basis
Hands-on enterprise administration of Microsoft Configuration Manager (MECM), Microsoft Intune, and Active Directory Group Policy across 2,000 or more endpoints
Experience leading endpoint initiatives from planning through completion, including success criteria and handoff to operations
Experience administering Microsoft Configuration Manager, Microsoft Intune, and Jamf Pro, primarily for Windows endpoints
Experience with co-managed configurations, operating system deployment and provisioning, Apple Business Manager enrollment, feature and security update servicing, application packaging and deployment, configuration profiles and policies, driver/firmware/BIOS management, third-party patching, BitLocker, FileVault, PowerShell, and shell scripting
Experience administering Intune MDM for iOS/iPadOS and MAM for iOS, iPadOS, and Android
Experience administering Active Directory Domain Services and Microsoft Entra ID in a hybrid identity environment
Experience with device join methods, directory synchronization, Group Policy, login scripts, MFA, Windows Hello for Business, and FIDO2 passkeys
Experience administering Microsoft 365 Apps for enterprise, OneDrive for Business, Microsoft Teams, and Outlook
Experience supporting Azure Virtual Desktop, Windows 365, Citrix, or VMware Horizon, including profile/image management and escalated troubleshooting
Ability to communicate technical information to non-technical audiences
Ability to provide individual or small-group computer product instruction and training
Occasional travel to other county work sites; ability to drive a county or personal vehicle as needed
Ability to meet physical demands, including lifting 20–50 lbs.
Preferred licenses/certifications include MD-102, MS-102, Jamf 200/300, CompTIA A+, Network+, Security+, or ITIL Foundation

Benefits

Comp & perks

24 days of paid flexible time off
Up to 12.5 paid holidays
Comprehensive insurance, including medical, dental, vision, flex benefits and more
Medical and dental clinic exclusive to employees
Pension plan and other retirement investment options
Advancement/professional development opportunities
Flexible work arrangements, including hybrid work
Paid/on-call support compensation not explicitly stated