Senior Systems Administrator

Your Role

The System Administrator III is a senior technical contributor with deep expertise in Microsoft 365 and Azure cloud infrastructure. This role assists with the design, optimization, and security of Ampirical's cloud and hybrid environments, serving as the internal subject matter expert for the Microsoft ecosystem. The Sr. Systems Admin operates autonomously, leads cross-functional cloud initiatives, drives automation, and mentors junior administrators across the IT team.

What You’ll Do

• Maintain and optimize Microsoft 365 licensing, including E3/E5 assignment, license reconciliation, and cost governance.
• Manage and enforce M365 governance policies covering data retention, DLP, sensitivity labels, and information barriers.
• Oversee Microsoft Intune MDM/MAM policies for corporate and BYOD device management.
• Manage Power Platform governance (Power Apps, Power Automate) in alignment with IT policy.
• Design and manage Conditional Access policies, MFA enforcement, and phishing-resistant authentication (FIDO2/passkeys).
• Administer Entra ID Privileged Identity Management (PIM) for just-in-time privileged access.
• Administer enterprise application registrations, OAuth consent policies, and service principal governance.
• Lead user lifecycle automation including provisioning, de-provisioning, and dynamic group management.
• Oversee B2B guest access governance and external collaboration controls.
• Implement and maintain Azure-based backup and disaster recovery solutions (Azure Site Recovery, Azure Backup).
• Monitor Azure resource health, cost management, and capacity planning using Azure Monitor and Cost Management tools.
• Ensure Azure environment adherence to security baselines, policy assignments, and compliance frameworks.
• Conduct access reviews, permission audits, and Entra ID sign-in log analysis for anomalous activity.
• Collaborate with the IT Security team on vulnerability remediation, endpoint compliance, and security incident response.
• Support internal and external audits with documentation of cloud controls and configurations.
• Hybrid Infrastructure & Server Management:
• Administer and maintain on-premises Windows Server environments (Active Directory, DNS, DHCP, Group Policy, Hyper-V).
• Assist with OS patching, server health monitoring, and change management for hybrid infrastructure.
• Design and automate system maintenance tasks using PowerShell and other scripting tools.
• Assist with disaster recovery planning, backup validation, and RTO/RPO definition for server and cloud workloads.
• Automation & Tooling:
• Evaluate and implement automation opportunities across cloud and hybrid environments.
• Evaluate and implement automation opportunities across cloud and hybrid environments.
• Evaluate and implement automation opportunities across cloud and hybrid environments.
• Evaluate and implement automation opportunities across cloud and hybrid environments.
• Evaluate and implement automation opportunities across cloud and hybrid environments.
• Evaluate and implement automation opportunities across cloud and hybrid environments.
• Documentation, Governance & Mentorship:
• Maintain up-to-date documentation for all cloud configurations, policies, and runbooks.
• Lead compliance documentation efforts supporting ISO, NIST, and client-driven audit requirements.
• Mentor Systems Admin I and II staff on cloud administration, scripting, and security best practices.
• Contribute to IT governance initiatives including software procurement, policy development, and standards enforcement.

Requirements

• Education: Bachelor's degree in IT, Computer Science, or related field (or equivalent combination of education and experience)
• Experience: 7+ years; 3+ years in cloud and Microsoft 365 administration
• Skills: AZ-104 or MS-102, Security+, Network+