Systems Administrator (SCCM/intune)

Why work at Blaney McMurtry LLP?

Blaney McMurtry LLP is a multi-service 120 + lawyer firm, based in the heart of downtown Toronto. For more than seventy years, we have helped clients overcome challenges and seize opportunities through our continuing commitment to achieving results and building relationships. We seek exceptional individuals who take pride in their work and know the importance of excellent client service.

Our motto is "Expect the Best" and that goes both ways. At Blaneys, we value a diverse and inclusive workplace that respects and supports all our staff. We offer a competitive salary based on experience and paid vacation. Your well-being is very important to us, and therefore we offer an excellent benefit package which includes health, dental, as well as an Employee Assistance Program. If you would like to gain new skills, we have abundant training and professional development opportunities to help to achieve your personal and professional goals.

Reporting to Director of Information Technology, the Systems Administrator manages and executes the delivery of professional, technical, and analytical IT Infrastructure services and solutions to the organization. This includes planning, designing, analyzing, installing, configuring, maintaining, repairing, and providing technical support on related devices, servers, appliances, and applications in coordination with the IT team, business areas, and vendors.

Key Accountabilities

• Serve as the primary systems administrator for Microsoft Configuration Manager (SCCM/MECM), Microsoft Intune, and Active Directory, maintaining AD best practices, Windows user and group administration, GPO (Group Policy Objects) management, and certificate management.
• Managing Windows 10 and Windows 11 imaging and task sequences (OSD), application packaging and deployments, on SCCM and Intune.
• Design and maintenance of the Microsoft Intune and Configuration manager environments, including packaging and deploying applications using Intune.
• Configure, deploy, and manage Microsoft Intune for mobile device management (MDM) and mobile application management (MAM).
• Understand and apply relevant Security Patches on servers and endpoints and implement configuration changes required to mitigate security vulnerability issues.
• Experience writing efficient and clear PowerShell scripts to automate device remediation.
• Respond to and resolve helpdesk escalations, in collaboration with the helpdesk team, external vendors, and other firm members to resolve complex technical issues and support the IT Director for incident response and corrective action plans.
• Understand and ensure compliance with applicable management, audit, and regulatory requirements.
• Maintain good working knowledge of the infrastructure services, proactively researches, recommends, and applies the latest technology and best practices to address IT infrastructure needs and specific project requirements.
• Create and update appropriate system documentation.
• Participate in other information technology related tasks as needed.

Education and Experience

• A College or Bachelor's degree in computer science, system administration, engineering or equivalent and 5 to 7 years of relevant industry experience.
• Minimum of 5 years experience of SCCM, patch lifecycle management and upgrades, in a corporate environment.
• Minimum of 3 years experience of M365 Suite, including Intune, Entra ID, and Purview.
• 2 to 3 years experience in an operational support role.
• 2 to 3 years experience managing vendors in a technical capacity.
• Recognized Certifications in Microsoft, Cisco, VMware, or other relevant combinations.
• An equivalent combination of education and/or experience may be considered.

Technical Requirements

• Experience managing and maintaining SCCM infrastructure, including patch management, creating and deploying software packages and updates, creating and managing collections, designing and deploying task sequences using Microsoft Endpoint Manager / SCCM.
• Experience creating/maintaining Windows 11 task sequences in Configuration Manager.
• Direct experience with on-premises Active Directory, Azure Active Directory (Entra ID) and Exchange Hybrid deployments.
• Experience implementing Co-management with Intune and Configuration Manager in a large corporate environment.
• Experience implementing and supporting Autopilot and Autopatch in a large corporate environment.
• Expertise in Intune compliance management, developing and enforcing security policies, device enrollment, compliance rules, and device configurations across the organization.
• Vulnerability Management skills for desktop OS class is required.
• Monitor Intune performance and generate reports on compliance, device health, and security status.
• Familiarity with Azure Active Directory (AAD), Microsoft Entra ID, and identity management.
• Experience with security policies and procedures related to GPOs, designing and deploying GPOs across multiple domains, creating, managing, and troubleshooting GPOs and ADMX templates.
• Strong experience with PowerShell scripting; automating tasks and creating custom scripts to improve efficiency using PowerShell.
• Experience managing mobile devices (Windows, iOS, Android) with Microsoft Intune.
• Familiarity with endpoint management and endpoint security tools such as Microsoft Defender, Crowdstrike Falcon, Computrace/Absolute, Mimecast, MFA: Cisco Duo / Authenticator, VPN: Palo Alto GlobalProtect, Cisco AnyConnect.
• Experience with Microsoft 365 and other cloud-based services such as Office 365 Admin Centre, OneDrive, SharePoint, Teams, WebEx, Microsoft Azure AD, Intune, Autopilot and Autopatch.
• Understanding of VMware and vSphere environments, virtual machines, storage, and other datacenter virtualization technologies.
• Strong communication skills including both technical and business writing, documentation, and presentation skills.
• Excellent interpersonal skills.
• Excellent problem solving and analytical thinking and innovation.
• Exceptional time management and multi-tasking skills.
• An understanding of law firm processes and procedures would be an asset.

To apply for this position, please submit your resume to Anthony Belmonte at abelmonte@blaney.com. In your email, make sure to include the job title in the subject line. Only those candidates selected for an interview will be contacted.

This position is on site.

If you require any accommodation in the application process, please contact us. Blaney McMurtry is committed to providing accommodations for people with disabilities. If you require accommodation, we will work with you to meet your needs.

We look forward to hearing from you and thank you for your interest.