Senior Network System Administrator
About the role
This position primarily involves sedentary work in an office setting. The employee must be able to sit for extended periods, operate a computer and other standard office equipment, communicate clearly in person and over the phone, and occasionally stand, walk, bend, kneel or reach to access files and supplies or move items. The role may also require occasionally lifting, carrying, pushing, or pulling items and equipment up to 25 pounds.
Responsibilities
- IT Infrastructure Administration and Support
- Setup and ensure LAN/WAN system and services are compliant with the organization’s guidelines and procedures including SD-WAN, VLAN segmentation, and secure remote connectivity
- Maintain domain name registrations and certificates needed for organization’s operations including SSL certificates, SSO certificates, and expiration monitoring
- Configure email services – Microsoft Exchange Online or Server and Microsoft 365 software
- Maintain systems and update Operating Systems to ensure they are secure including endpoint compliance policies, patching, and device security baselines
- Provide IT support escalation for complex support issues related to IT systems, software, and hardware
- Track software usage and licensing to ensure legal compliance including Microsoft licensing, SaaS subscriptions, and vendor licensing portals
- Troubleshoot remote access connectivity issues including VPN, conditional access, and endpoint compliance-related access issues
- Create, implement, enforce, and monitor security policies, strategies, and procedures to protect the data and systems of the organization
- Install, configure, and maintain enterprise security platforms including Fortinet (Fortigate, FortiClient, EMS, and related services), Microsoft security tools, and endpoint protection platforms
- Implement and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA) for all major software systems including enterprise application registration, SSO configuration, certificate lifecycle management, and identity governance
- Monitor, investigate, and respond to security events and alerts across systems including firewall, endpoint, and identity platforms
- Support VOIP telecommunication system and on-going needs of organization
- Manage network printers and multi-functional printers, and printing services including cloud printing systems
- Maintain detailed documentation of network and system configurations
- Create standard operating procedures and best practices
- Communicate and train staff and ITS team members on IT Infrastructure and Systems
- Manage data backups of critical systems and maintain offsite/cloud data storage including cloud backup platforms and protection against data loss or ransomware
- Test and verify data backups; perform restoration tasks and minimum annual restoration test including periodic validation of restore procedures and recovery timeline
- Remain current with industry related technology standards and best practices
- Participate in strategy planning and implement solutions for new or improved IT infrastructure and software systems
- Lead and guide vendor engagement for enhanced services and support of systems
- Vendor management for outsourced services and support of IT systems
- Lead projects and assignments to support the overall IT strategic plan
- Complete or participate in annual audits of IT Systems, Infrastructure and Security
- Occasional travel may be required
Requirements
- Bachelor’s degree in Computer Science or Information Technology OR Associate’s degree and 3-5 relevant IT Certifications required
- 5+ years of complex network and system administration work experience required
- Three or more IT certifications related to administration of Microsoft services, Identity Management, Network Services, IT/Cyber Security, CRM or ERP systems are required
- Strong experience with Microsoft Entra ID (Azure AD), including Conditional Access, SSO, and identity governance
- Experience managing firewall and network security platforms, preferably Fortinet (FortiGate, EMS, and FortiClient)
- Experience with endpoint management using Microsoft Intune, including device provisioning and application deployment
- Proven proficiency in network, system and server administration including server virtualization and management of cloud services is required
- Working knowledge and experience implementing and supporting Microsoft Active Directory and Microsoft Entra ID (Azure AD) in a hybrid and/or cloud-first environment is required
- Experience with security monitoring, log analysis, and incident response across identity, endpoint, and network systems
- Experience with scripting or automation (PowerShell or equivalent) strongly preferred
- Expert knowledge of networking concepts, protocols and security is required
- Knowledge and 3+ years’ experience supporting VOIP telecommunications systems and mobile device configuration is required
- The ability to install and upgrade hardware systems, learn new software systems, train others to use the systems and coordinate multiple projects simultaneously is required
- Able to organize and prioritize a wide range of daily tasks with varied deadlines is required
- Good judgment required in recognizing and maintaining confidentiality of sensitive information
- Must enjoy working with others in a team environment and be flexible to meet the requirements of the department and ministry
- Must be dependable, cooperative, flexible, and exhibit enthusiasm and initiative
- Must support a flexible schedule and work evening/weekend hours when needed
- Good interpersonal communication skills both verbal and written and the ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines are necessary
- Must be detail oriented, committed to accuracy, a collaborator and self-starter who is flexible and able to work independently
- Must demonstrate a keen sense of confidentiality
- Strong general computer skills are necessary along with a competent, working knowledge of Windows, Microsoft Excel, Microsoft Word, Microsoft Outlook, and the Internet
- Understanding of Christian ministry and specifically Joni and Friends is desirable
Qualifications
- Desire to serve in a growing and dynamic Christian service ministry
- Vibrant personal relationship with Jesus Christ and agreement with the Joni and Friends statement of faith
Skills
- Strong experience with Microsoft Entra ID (Azure AD), including Conditional Access, SSO, and identity governance
- Experience managing firewall and network security platforms, preferably Fortinet (FortiGate, EMS, and FortiClient)
- Experience with endpoint management using Microsoft Intune, including device provisioning and application deployment
- Proven proficiency in network, system and server administration including server virtualization and management of cloud services
- Working knowledge and experience implementing and supporting Microsoft Active Directory and Microsoft Entra ID (Azure AD) in a hybrid and/or cloud-first environment
- Experience with security monitoring, log analysis, and incident response across identity, endpoint, and network systems
- Experience with scripting or automation (PowerShell or equivalent) strongly preferred
- Expert knowledge of networking concepts, protocols and security
- Knowledge and 3+ years’ experience supporting VOIP telecommunications systems and mobile device configuration
- The ability to install and upgrade hardware systems, learn new software systems, train others to use the systems and coordinate multiple projects simultaneously
- Able to organize and prioritize a wide range of daily tasks with varied deadlines
- Good judgment required in recognizing and maintaining confidentiality of sensitive information
- Strong general computer skills are necessary along with a competent, working knowledge of Windows, Microsoft Excel, Microsoft Word, Microsoft Outlook, and the Internet
Benefits
Not specified
Pay
$98,000 - $115,000 per year
Schedule
This is a hybrid position working in the Agoura Hills office on Monday, Tuesday, and Thursday. Wednesday and Friday are remote workdays.
Employee Ministry Engagement
Joni and Friends is a Christ-centered community. Therefore, we expect every employee at Joni and Friends to excel in their walk with Christ and in their specific employment role in our Christian community. We purposely create a gospel-centered environment and offer leadership and development training to help employees perform their work with integrity and excellence, serving in our Christian community at Joni and Friends to fulfill our religious ministry: to share the gospel and serve people living with disabilities.