Microsoft 365 Identity & Endpoint Management Specialist at GrayMatter – Cleveland, Ohio

At GrayMatter, we transform operations and empower people. Our consulting, implementation and technology curation services help industrial companies modernize their production environments and support operators working on the plant floor. Clients collaborate with GrayMatter to achieve their manufacturing efficiency goals, create intuitive data visualizations, reduce cybersecurity threats and guide successful digital transformation initiatives.

And that's where you come in.

GrayMatter is dedicated to creating a team of unmatched talent in industrial technology. Our organizational culture encourages opportunities to learn and collaborate. Five core values woven into our DNA make Team GrayMatter stand above the rest: Accountability, Integrity, Respect, Innovation and Teamwork.

We are seeking a Microsoft 365 Identity & Endpoint Management Specialist who will serve as a subject matter expert in Microsoft 365 administration, identity lifecycle, and endpoint management. This position will support the enterprise by managing identity and access, ensuring compliance, and driving automation and optimization across Microsoft platforms. The role will frequently collaborate with internal teams and leadership, providing expertise in security, compliance, and operational efficiency. Performs other job-related duties as required.

General Job Duties:

• Serve as SME for Microsoft Entra ID and AD DS; manage identity lifecycle, security, and hybrid integrations
• Administer Microsoft Intune; standardize device configurations, app deployments, and patching across Windows, macOS, and iOS platforms
• Modernize legacy application deployment processes; define and implement departmental application standards via Intune
• Ensure identity and endpoint services align with organizational security policies and regulatory standards
• Design and implement automation workflows using PowerShell, Azure Automation, Power Automate, Logic Apps, and Microsoft Graph API
• Integrate Workday with hybrid Entra ID/on-prem AD for automated user provisioning and lifecycle management
• Manage MFA, Windows Hello for Business, and Conditional Access policy rollouts across enterprise/government environments
• Maintain comprehensive documentation and provide regular updates to internal teams and leadership

Knowledge, Skills and Experience Needed:

• Expert-level administration of Microsoft 365 suite
• Deep expertise in Identity and Access Management (IAM) using Microsoft Entra ID, Active Directory Domain Services (AD DS), and Azure RBAC
• Advanced endpoint management across Windows, macOS, and iOS using Microsoft Intune, including device compliance, configuration profiles, and app deployment
• Proficient in automation using PowerShell, Azure Automation, Power Automate, Logic Apps, and Microsoft Graph API
• Experience integrating Workday with hybrid Entra ID/on-prem AD for automated user provisioning and lifecycle management
• Hands-on experience with MFA, Windows Hello for Business, and Conditional Access policy rollouts
• Exposure to CyberArk for privileged access management (nice to have)

Required Certifications:

• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Endpoint Administrator Associate

Featured Benefits:

• Medical, dental, and vision insurance beginning day one of employment
• Employer paid short term disability and life insurance
• 401(k) with up to 4% company match
• Paid holidays, paid time off, paid sick leave, and paid parental leave
• Additional benefits available such as long term disability, accident, critical illness, hospital indemnity, EAP, telemedicine, HSA and FSA