Windows Systems Administrator
Summary
We are seeking an experienced, agile, and collaborative Windows Systems Administrator to join our growing IT department. The ideal candidate will have the maturity, confidence, and sound design, troubleshooting, and decision-making skills required to operate as a Tier 3 technical resource within a GxP-regulated environment.
Essential Job Functions
Administer Microsoft Azure / Entra ID infrastructure, including user accounts, groups, conditional access policies, Intune, mobile device management, and endpoint security.
Serve as the onsite Tier 3 escalation point for complex infrastructure, endpoint, and system issues that cannot be resolved by the MSP-operated Tier 1/2 helpdesk; provide oversight, technical direction, and quality feedback to MSP resources.
Partner with the Security Analyst, who owns access reviews and audit trail reviews, by providing technical support, data extracts, and remediation actions as needed.
Work closely with Engineering, Quality Control, Quality Assurance, and other stakeholders to deliver infrastructure solutions that drive operational excellence and process improvements.
Ensure alignment with internal directives, regulatory expectations, and industry guidelines for supported applications and systems.
Participate in occasional after-hours and weekend work to support scheduled maintenance windows, patching cycles, and system onboarding activities.
Patch & Vulnerability Management
Own day-to-day execution of the enterprise patch management program for Windows endpoints and servers, leveraging WSUS as the primary tooling.
Plan, schedule, and execute patching cycles in coordination with the MSP, including pre-deployment testing, phased rollouts, maintenance window coordination, and post-deployment validation.
Assist the MSP and Infrastructure team with patching and firmware updates for network gear and firewalls; coordinate change windows and validate post-patch connectivity.
Plan and execute patching for laboratory and engineering instrument workstations and servers, accounting for vendor-validated configurations, locked OS images, and qualification status.
Track patch compliance, exceptions, and remediation timelines; escalate risks and report status to the Sr. Infrastructure Manager.
Maintain patch-related runbooks, work instructions, and change documentation in accordance with GxP and Good Documentation Practices.
System Onboarding & Lifecycle Administration
Serve as the IT technical lead for onboarding new software platforms and hardware systems including Lab and Engineering instruments and equipment joining the domain while partnering with the program manager as the designated technical system owner.
Cook up and maintain system work orders, runbooks, configuration records, and supporting documentation to ensure assets are reliable, accessible, secure, and inspection-ready.
Administer, support, and maintain workstations, servers, and instrument software across Quality Control labs, Engineering, and other business areas throughout their lifecycle.
Support continuous improvement of onboarding standards, intake processes, and lifecycle controls in alignment with ITIL and GxP expectations.
Special Job Requirements
5+ years of progressive IT administration experience.
3+ years of experience managing the Microsoft Azure / Entra ID platform, including Intune, MDM, endpoint management, Teams, SharePoint, and related Azure-powered solutions.
Demonstrated experience operating an enterprise patch management program, including WSUS administration, patch cycle planning, and coordination with managed service providers.
5+ years of proven experience maintaining and troubleshooting Windows-based workstations and servers.
Experience supporting the onboarding and lifecycle administration of enterprise software platforms and instrument/laboratory hardware in a regulated environment.
Proven experience as a Tier 2/Tier 3 escalation resource with a strong customer service mindset; experience providing technical oversight to or partnership with an MSP is a plus.
Working knowledge of SOP authoring, systems support, Data Integrity guidance, GxP compliance, Software Development Life Cycle, ITIL, and Good Documentation Practices in a regulated environment.
B.S. in Engineering, Computer Science, Information Technology, or related field; or equivalent experience.
Additional Preferences
Advanced certification in Microsoft Azure platforms (e.g., AZ-104, AZ-500).
Microsoft Endpoint Administrator certification (MD-102) or equivalent endpoint/patching credential.
ITIL Foundation certification.
CompTIA Security+ or equivalent security credential.
Familiarity with GAMP 5 and Computer System Validation (CSV) concepts.