Administers Microsoft 365, Intune, Entra ID, and Windows/macOS endpoints in a HIPAA-regulated remote environment. Manages identity lifecycle, MFA, Conditional Access, encryption, compliance, DLP, provisioning, endpoint security, vulnerability remediation, audits, asset logistics, and advanced desktop support. Automates administrative tasks with PowerShell, maintains documentation and runbooks, supports incident response, and coordinates with infrastructure and security teams. Occasional after-hours maintenance and minimal travel are required.