Enterprise Systems Administrator

Position Summary

The Enterprise Systems Administrator is responsible for the day-to-day management, monitoring, security, and support of the firm’s enterprise servers, applications, and cloud platforms. This role ensures the stability, security, and optimal performance of all enterprise infrastructure, with a focus on Microsoft technologies.

Key Responsibilities

• Manages, monitors, and supports Microsoft Windows operating systems, software applications, and related infrastructure services across the on-premises infrastructure and cloud platforms
• Maintains regular server and application security updates and patches to mitigate vulnerabilities and enhance system performance, following established server patch management processes and procedures
• Monitors and analyzes performance, availability, and security alerts for servers, applications, and services, using various tools and methods, such as dashboards, alerts, reports, logs, etc.
• Conducts regular health and security checks on servers and related infrastructure services and implements security best practices and recommendations
• Configures and maintains security settings, access rights, and related controls to prevent unauthorized access, data loss, and other security threats
• Administers and supports Microsoft System Center Configuration Manager (SCCM) infrastructure, Active Directory Domain Services, and Microsoft Entra ID
• Administers and maintains monitoring with Microsoft System Center Operations Manager (SCOM) while integrating Azure Monitor and Log Analytics workspace
• Provides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security and monitoring-related issues
• Identifies and responds to security incidents and threats, following the incident response plan and procedures, and coordinates with other IT staff and external parties as needed
• Develops and maintains automation scripts to automate administrative and routine tasks
• Supports project delivery and execution of tasks related to areas of team
• Collaborates with information security and compliance teams to ensure compliance with industry standards
• Stays current with emerging trends and best practices in infrastructure optimization and modernization, endpoint protection, identity management, cloud security, and AI model security
• Maintains standard operating procedures and configuration documentation for infrastructure systems and processes

Qualifications

• Strong expertise in Microsoft Windows operating systems
• Good working knowledge of cloud platforms such as Microsoft Azure
• In-depth knowledge of AD DS, Entra ID, DFS, ADFS, and LDAP
• Solid understanding of identity and access management and role-based access control concepts
• Working knowledge of SQL, IIS and SharePoint troubleshooting
• Good working knowledge of identity federation and multifactor authentication management
• Solid understanding of authentication and authorization flows
• Strong knowledge in monitoring and security tooling, such as antivirus, endpoint protection, identity protection, data loss prevention, application-based firewalls, SIEM, etc.
• Solid understanding and familiarity with Linux and MacOS systems preferred
• Solid scripting skills in PowerShell; experience with other scripting/programming languages is preferred
• API programming skills are preferred
• Basic understanding of AI model infrastructure security is preferred
• Strong analytical, critical thinking, and problem-solving skills
• Able to troubleshoot and resolve system, application, security, and performance issues
• Strong communication, interpersonal, and cross-functional collaboration skills
• Able to articulate issues, risks, and proposed solutions to various levels of technology staff, management, and non-technical audiences
• Strong attention to detail and accuracy
• Able to document and maintain security and monitoring policies, procedures, and configurations
• To multitask efficiently yet prioritize and organize competing work demands
• Demonstrated integrity and commitment to strict ethical standards in all professional dealings
• Proven record of reliability and dependability
• Candidate must be a self-starter and independent, yet function as an integral part of a team
• Proven ability to work independently and collaboratively in a fast-paced, and security-conscious environment
• Candidate must demonstrate a high degree of initiative and motivation
• Able to work flexible hours and be on-call

Education & Prior Experience

• Bachelor’s degree in Computer Science, Information Systems, or related field, or equivalent work experience
• 5+ years of professional experience managing medium-to-large enterprise Microsoft Windows environments, preferably in a law firm or professional services environment
• 5+ years of experience in systems administration, or similar technical roles
• Solid experience managing all aspects of Active Directory Domain Services
• Proven troubleshooting and technical issue resolution experience
• Experience with WMI, Syslog, and Performance Monitor
• Relevant Microsoft certifications: Azure Security Engineer Associate and Identity and Access Administrator Associate, or equivalent are preferred