Information Technology System Administrator

About the role

The IT Systems Administrator will oversee the internal technology estate, reporting to the Senior Director, Platform Engineering. The primary mission of this role is to ensure every new hire is fully productive on their first day and fully deprovisioned upon departure, maintaining identity, endpoint, and SaaS systems through automated, repeatable processes rather than tribal knowledge. Operating directly within the Platform Engineering team rather than a siloed IT department, this position collaborates alongside platform engineers, utilizes modern tooling, and prioritizes automating recurring manual tasks. The ideal candidate is pragmatic, service-oriented, comfortable acting as the primary organizational resource for access and equipment, and eager to leverage AI tooling in day-to-day operations. This is a full-time, primarily remote role based in the United States, requiring occasional annual team on-sites.

Responsibilities

• Administer the Microsoft Entra ID workforce tenant and Microsoft 365 environment, including user accounts, groups, licensing, conditional access, and MFA policies.
• Manage SSO and SAML/OIDC application integrations across a federated SaaS estate (including GitHub Enterprise Cloud, Salesforce, MongoDB Atlas, HubSpot, Keeper, OpenVPN, Autodesk, and additional applications), onboarding new software as needed.
• Conduct periodic user access reviews and least-privilege cleanups, generating verifiable evidence for compliance audits.
• Support evolving identity and directory initiatives, including domain changes, directory migrations, and platform consolidation.
• Oversee the device fleet via Rippling, managing enrollment, configuration, compliance policies, patching, and encryption baselines across laptops and mobile devices.
• Direct hardware asset inventory and lifecycle operations, covering procurement, imaging, shipping to distributed personnel, refreshes, and secure retirement.
• Maintain accurate, real-time inventories of hardware devices, software, and SaaS licenses without reliance on reactive quarterly audits.
• Drive the end-to-end employee onboarding and offboarding lifecycle toward zero-touch, same-day provisioning and deprovisioning using Rippling as the central system of record.
• Act as the escalation point for employee IT inquiries regarding access, accounts, hardware, connectivity, conferencing, and technical impediments.
• Administer organization-wide SaaS applications, including provisioning, deprovisioning, license reconciliation, and vendor renewal coordination.
• Automate recurring IT workflows, such as scripted provisioning, access reporting, license reconciliation, and compliance evidence gathering.
• Integrate AI tools such as Claude Code and Cursor into everyday workflows, drafting internal runbooks executable by both human operators and automated agents.
• Support company-wide AI tooling administration, including seat management, license allocation, access provisioning, and internal adoption.
• Support SOC 2 and NIST 800-171 audits end to end by compiling evidence, addressing auditor inquiries, tracking remediation items, and owning IT-side controls for access management, account lifecycles, asset tracking, MFA enforcement, and device compliance.
• Administer the Vanta compliance automation platform, maintaining continuous integrations across identity, device, and ticketing systems to streamline evidence collection.
• Oversee employee-facing compliance requirements, such as security awareness training completion, policy acknowledgments, e-signatures