Systems Administrator, I/II/Engineer

MDU Resources Group, Inc. is seeking a highly motivated technology professional to support enterprise endpoint systems management across Windows, macOS, and other managed devices. This position is responsible for administering and improving platforms and processes used for operating system deployment, application packaging, patch management, vulnerability remediation, endpoint configuration, and device lifecycle support. The role works with Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, Windows Autopilot, Jamf Pro, Patch My PC, and related endpoint management technologies to help maintain secure, reliable, and well-managed enterprise endpoints.

All MDU Resources employees are responsible for placing safety as their #1 priority in day-to-day work routines for themselves and others.

Systems Administrator I: ($63,860 - $79,830)

• Requires knowledge of systems administration, programming, and networking at a level normally acquired through the completion of a four-year degree in computer science, information technology (IT) or related field; and
• Two years' experience providing technical support for the hardware, operating system software, security systems and file structures for an IT infrastructure

Systems Administrator II: ($73,460 - $91,830)

• Requires knowledge of systems administration, programming, and networking at a level normally acquired through the completion of a four-year degree in computer science, information technology (IT) or related field; and
• Four years' experience providing technical support for the hardware, operating system software, security systems and file structures for an IT infrastructure

Systems Engineer: ($97,110 - $121,390)

• Requires knowledge of systems administration, programming, and networking at a level normally acquired through the completion of a four-year degree in computer science, information technology (IT) or related field; and
• Six years' experience providing technical support for the hardware, operating system software, security systems and file structures for an IT infrastructure

• Experience troubleshooting and evaluating MECM/SCCM client logs to identify issues with application, patch, or Operating System Deployment (OSD) failures.
• Experience with PowerShell or other scripting languages to facilitate task automation.
• Experience in vulnerability management and application & OS hardening to mitigate Common Vulnerability and Exposures (CVE) using server configuration changes, registry edits, and/or command line changes.
• Experience including MECM (SCCM), Intune, Co-management and Windows Autopilot.
• Experience with installing patches and Software Distribution.
• Experience installing, configuring, operating, administering, and maintaining recent versions of Microsoft Endpoint Configuration Manager (MECM \ SCCM).
• Ability to work independently to meet goals and objectives with minimal supervision.
• Experience with Endpoint management, Microsoft Intune Technology; Creating Security Policy, Device Compliance, Troubleshooting.

• Must take all measures necessary to protect networks, devices, programs and data from cyber-attack, damage or unauthorized access.
• This position is located in Bismarck, ND but may consider a remote work location in the United States where MDU Resources is authorized to do business.
• Must be legally authorized to work in the United States, no sponsorships considered.
• May be required to maintain a valid driver's license.

• Administer and support endpoint management platforms including MECM, Intune, Jamf Pro, PatchMyPC, and related tools used to manage enterprise workstations, servers, macOS devices, and other endpoints.
• Plan, test, package, deploy, and monitor operating system updates, application updates, and application deployment packages for commercial, internal, and specialty business applications while minimizing business disruption.
• Support Windows and macOS endpoint lifecycle management, including Windows operating system deployment, task sequences, imaging, driver management, post-upgrade actions, Jamf enrollment, configuration profiles, software deployment, inventory, troubleshooting, and modernization efforts such as Windows Autopilot and cloud-based provisioning.
• Develop and maintain endpoint configuration standards, secure baseline settings, compliance policies, detection logic, remediation processes, and related automation aligned with security and operational requirements.
• Troubleshoot MECM client health, distribution point issues, deployment failures, software update scan errors, Jamf policy behavior, enrollment problems, and other endpoint management platform issues.
• Collaborate with cybersecurity, infrastructure, service desk, application owners, and business unit teams to remediate vulnerabilities, validate patch compliance, resolve endpoint security risks, and improve service delivery.
• Use PowerShell, shell scripting, reporting tools, documentation, standard operating procedures, knowledge base articles, deployment guides, and key performance indicators to improve reliability, reduce manual effort, support repeatable processes, and measure service effectiveness.
• Performs other tasks and special projects as assigned.