Systems Administrator

BASIC FUNCTIONS AND GENERAL RESPONSIBILITIES

• Administer and support endpoint management platforms including Microsoft lntune, Entra ID (Azure AD), and Autopilot for Windows devices.
• Oversee lifecycle management for endpoints, including provisioning, configuration, patching, and secure retirement of devices.
• Administer and secure shared-device environments (e.g., Chromebooks), ensuring role-appropriate access and least privilege principles.
• Maintain standards for device configurations across Windows, ChromeOS, and mobile platforms.
• Administer user identities, licenses, and access within Entra ID.
• Manage differentiated access models for licensed Microsoft users and shared-device users.
• Implement and maintain role-based access controls and participate in regular access reviews.
• Define identity lifecycle policies and access standards for onboarding, role changes, and offboarding.
• Monitor security alerts and logs from endpoint protection, identity (Entra ID), and device management (lntune) platforms.
• Implement and maintain security controls such as MFA, Conditional Access, Endpoint protection, and secure baseline configurations.
• Develop and maintain scripts or automation to improve operational efficiency and reduce manual effort.
• Create and maintain system documentation, technical standards and operational playbooks.
• Serve as an escalation point for complex endpoint issues beyond the Help Desk scope.
• Cook with internal departments and external vendors on technical projects and issue resolution.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent experience.
• Minimum of 5 years of experience as a System Administrator or System Engineer.
• Strong experience administering Microsoft 365 and Microsoft Entra ID.
• Experience with Microsoft Intune and endpoint management.
• Experience with enterprise backup and disaster recovery solutions.
• Demonstrated experience in systems or endpoint administration in a cloud-first or SaaS-based environment.
• Working knowledge of identity and access management, endpoint security, device lifecycle management.
• Ability to manage multiple priorities and work independently with minimal supervision.