IT System Administrator

About the Company

Tennessee Orthopaedic Alliance (TOA) is the largest orthopaedic surgery group in Nashville and Middle Tennessee, specializing in the diagnosis and treatment of musculoskeletal disorders and injuries. With over 90 years of service, TOA operates 35 locations and is recognized as an employer of choice for its stability, impactful work environment, and comprehensive total rewards.

Responsibilities

• Server and Systems Administration
  • Administer physical and virtual servers, including storage allocation, operating system patching, software configuration, and lifecycle management.
  • Administer Azure Virtual Desktop, ensuring availability of host pools and successful scheduled reboots and updates.
  • Configure monitoring software to proactively address issues and respond to correct them.
  • Maintain server-grade equipment in switch closets across all locations.
  • Ensure system backups complete successfully and perform restores and routine recovery testing.
  • Maintain accurate technical documentation and standard operating procedures.
• Identity, Access, and Microsoft 365
  • Administer Active Directory: manage users, groups, and devices; audit and clean up stale accounts; maintain directory health using tools like PingCastle.
  • Administer the Microsoft 365 environment, including users, groups, applications, and license assignment/reclamation.
  • Build and maintain single sign-on (SSO) integrations with third-party applications, including AD group mapping, SCIM provisioning, and claims.
  • Administer Microsoft Intune in partnership with the desktop support team, including applications, compliance policies, and device enrollment.
  • Manage file share and folder permissions, including security groups, read/write access, and periodic access reviews.
  • Administer self-service password and account management tools, including certificate renewal and policy configuration.
  • Maintain Active Directory auditing and reporting tools, including data connectivity and license installation.
• Telecom and Voice
  • Administer the cloud VoIP phone system, including call routing, menus, call groups, and extension management.
  • Maintain phone schedules across all locations, including rolling phones, holiday schedules, and unplanned closures.
  • Administer voicemail transcription services, including adding and removing users.
  • Configure and support overhead paging systems at care center locations, coordinating break/fix work with vendors.
  • Submit and track spam and robocall mislabeling removal requests for TOA phone numbers.
• Security and Vulnerability Management
  • Remediate findings from routine vulnerability and threat management scans, track issues to closure, and participate in recurring review calls.
  • Apply security patches and hardening standards to support HIPAA and organizational compliance requirements.
• Collaboration
  • Cross-train with the Network Administrator on networking and server administration.
  • Coordinate with third-party vendors and managed service partners on escalations, projects, and new site builds.
  • Provide escalation support to the help desk and desktop support team as needed.

Requirements

• Education and Experience
  • Associate’s degree in Computer Science or equivalent (4+ years of experience accepted).
  • 3+ years of server administration experience preferred.
  • Experience administering Microsoft 365 required.
  • Experience with Active Directory and Group Policy required.
  • Experience with Microsoft Intune, Azure Virtual Desktop, or Entra ID preferred.
  • Experience supporting a healthcare environment and HIPAA requirements preferred.
• Skills and Abilities
  • Strong analytical and technical ability.
  • Excellent communication skills, including interacting with end users, physicians, management, and coworkers.
  • Strong sense of urgency and responsiveness while staying focused on issues.
  • Working knowledge of single sign-on concepts (SAML, SCIM provisioning, claims mapping).
  • Familiarity with vulnerability management and remediation workflows.
  • Comfortable with data migrations between systems.
  • Active Directory Group Policy experience.
  • Experience with domain merges/collapse is a plus.
  • Familiarity with two-factor authentication systems (e.g., Duo).
  • Comfortable scripting for administrative tasks (PowerShell preferred).

Benefits

• Competitive salaries based on the Middle Tennessee wage market.
• Comprehensive benefits package, including medical and dental coverage.
• Paid Time Off (PTO).
• 401(k) plan with company match, safe harbor match, and profit-sharing match.