Senior Systems Administrator

About the role

The New York City Comptroller’s Office works to promote the financial health, integrity, and effectiveness of New York City government.

Responsibilities

• Provide identity management functions for entire account lifecycle, including creation, modifying, and separation accounts from the environment.
• Perform and monitor security administration by modifying users, groups and application links, passwords etc. for all agency critical systems.
• Test, deploy, and report on MS security updates and MECM patch management & software deployments to servers and clients; monitor for new updates.
• Provide Intune administration for desktops, laptops, and mobile devices.
• Provide Tier 2 support with desktops, laptops, and mobile devices in regard to missing patches and/or Intune compliancy.
• Develop and maintain agency standard MS Windows image.
• Maintain security by monitoring the system for potential vulnerabilities, identifying and mitigating risks.
• Perform and monitor Microsoft 365 product licensing, permissions, features, and group access.
• Manage Exchange Online, including mailbox permissions, quarantined items.
• Troubleshoot technical issues such as email delivery failures or authentication problems.
• Manage the deployment of new features or functionality after they have been tested in a staging environment.
• Analyze and monitor Microsoft Office 365 ATP management alerts and email quarantine for policy violations/escalation.
• Administer the current key card access system, assigning/removing appropriate access to users as required.
• Monitor video surveillance cameras to ensure all are recording properly.
• Liaise with security vendor on scoping, quoting, and installing new card readers or video surveillance cameras.
• Maintain the agency's network security policies, standards, and procedures.
• Provide Tier 2 technology support to team members of the Service Desk as an escalation point for unsolved issues.
• Utilize the agency’s trouble ticket management software.
• Participate in technical working groups strategizing for future requirements and propose architecture enhancements based on business needs. Research and recommend innovative approaches for system administration tasks.
• Prepare security related reports using different applications for management.
• Setup, configure, and deploy printers throughout the agency.
• Provide Tier 2 support for Print environment, including Secure LDAP sign-in, Secure Print, Scanning from Multi-Function Printers.
• Manage the managed service portal for service and consumables’ replacement on the printers.
• Administer the current fax solution, including adding, changing, removing users/mailboxes that need to receive incoming faxes.
• Setup multifunction printers to receive incoming faxes where needed.
• Setup inbound fax numbers to route to network fileshares through city FTP server and scheduled scripts to route appropriately.
• Maintain and write existing and new PowerShell scripts integrating with MS365 environment.
• Integrate PowerShell scripts with MS SQL Server.

Requirements

• Two years of satisfactory full-time computer operations experience, in a large-scale networked, multi-tiered, or mainframe computer environment, or two years of satisfactory data communications network experience working in a mainframe or multi-tiered computer environment.
• A baccalaureate degree from an accredited college or university and three years of satisfactory full-time experience as described in "1" above.
• A four-year high school diploma or its educational equivalent and four years of satisfactory full-time experience as described in "1" above.
• A satisfactory combination of education and/or experience equivalent to "1", "2",or "3" above.

Qualifications

• Expertise in Microsoft Server Administration with MCSA certification.
• Expertise in Microsoft Endpoint Configuration Management (MECM) / Microsoft Intune for servers and workstations.
• Expertise in Active Directory Administration, including, but not limited to, Account Creation, Security Permissions, DNS, DHCP, Group Policy Management, Print Management, and Sites and Services management.
• Expertise in Microsoft Windows Desktop operating system and Microsoft Office suite of applications.
• Working knowledge of Microsoft 365 products, including Exchange Online, SharePoint, OneDrive, PowerShell, Microsoft Azure.
• Experience in reading MECM client Logs and Patch compliance.
• Working knowledge of Advanced Threat Protection technology and policies creation.
• Working knowledge of multi-factor authentication technology.
• Ability to work in a team environment.
• Ability to plan, organize and work on multiple tasks simultaneously.
• Strong communication skills.

Skills

• Expertise in Microsoft Endpoint Configuration Management (MECM) / Microsoft Intune for servers and workstations.
• Expertise in Active Directory Administration, including, but not limited to, Account Creation, Security Permissions, DNS, DHCP, Group Policy Management, Print Management, and Sites and Services management.
• Expertise in Microsoft Windows Desktop operating system and Microsoft Office suite of applications.
• Working knowledge of Microsoft 365 products, including Exchange Online, SharePoint, OneDrive, PowerShell, Microsoft Azure.
• Experience in reading MECM client Logs and Patch compliance.
• Working knowledge of Advanced Threat Protection technology and policies creation.
• Working knowledge of multi-factor authentication technology.
• Ability to work in a team environment.
• Ability to plan, organize and work on multiple tasks simultaneously.
• Strong communication skills.

Benefits

Not specified.

Pay

Not specified.

Schedule

Not specified.