Enterprise Systems Administrator

Monterey Bay Aquarium•Monterey, CA

5d•$70,304 - $84,000•Onsite

About The Position

Under general supervision, perform hands-on administration, configuration, security, maintenance, and lifecycle support for organization-wide enterprise systems and cloud services. This position provides dedicated systems administration across all enterprise platforms. Administer Microsoft 365 A5 as the foundational platform for identity, access, endpoint management, messaging, collaboration, communications, licensing, security, and integrations. Ensure services are reliable, secure, documented, and operated according to established standards, change control, audit requirements, and service levels; perform other duties as required.

Requirements

4+ years of hands-on enterprise systems administration or closely related experience supporting production environments
Proven hands-on experience administering Microsoft 365 in an enterprise environment, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user/access lifecycle, and rights management
Working knowledge of servers, storage, virtualization, cloud infrastructure, backup/recovery, monitoring, certificates, and enterprise platform operations
Working knowledge of identity and access management, privileged access, least privilege, authentication, authorization, and directory-service concepts
Experience with endpoint enrollment, compliance, configuration, application deployment, encryption, inventory, and device lifecycle processes
Experience implementing approved system builds, upgrades, migrations, integrations, patching, and production changes
Experience with backup monitoring, restores, recovery testing, recovery objectives, business continuity, and evidence retention
Ability to use scripting and automation to improve routine administration, deployment, monitoring, and reporting
Knowledge of security hardening, configuration baselines, vulnerability remediation, change control, and audit support
Working knowledge of networking concepts relevant to systems administration, including name resolution, addressing, routing, secure communications, and service connectivity
Strong troubleshooting skills across integrated enterprise services and ability to identify when escalation is required
Ability to translate documented business and technical requirements into secure, reliable, and supportable system configurations
Ability to work independently with general direction, follow established standards, and seek guidance for high-risk or unusually complex decisions
Ability to prioritize assigned work, meet service expectations, and complete tasks accurately
Strong written and verbal communication skills, including the ability to explain technical issues to technical and nontechnical audiences
Strong documentation, organization, and attention-to-detail skills
Collaborative service orientation and ability to work effectively with business/system owners, technical peers, vendors, and auditors
Ability to protect confidential information and maintain appropriate security, privacy, and access controls
Ability to work within and maintain Monterey Bay Aquarium's Core Values

Nice To Haves

Two-year or four-year college degree or equivalent combination of education, certification, training, and experience

Responsibilities

Administer and maintain enterprise servers, storage, virtualization, cloud infrastructure, directory services, certificates, and related platforms using established standards and procedures.
Configure, secure, and support Microsoft 365 A5, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user lifecycle, access, and rights management.
Troubleshoot and resolve systems availability, performance, authentication, configuration, integration, and security issues; document findings and escalate high-risk or unusually complex conditions.
Implement approved system builds, upgrades, migrations, integrations, and configuration changes; complete testing, change records, rollback steps, and production validation.
Apply and verify patching, hardening, encryption, privileged-access, least-privilege, and configuration-baseline controls across systems and endpoints, in coordination with IT Security.
Monitor backup, restore, and recovery processes; perform approved restores and recovery tests and maintain evidence supporting business continuity and disaster recovery.
Automate administration, deployment, monitoring, alerting, dashboards, and reporting to improve reliability and consistency.
Maintain architecture diagrams, inventories, configuration records, standards, procedures, runbooks, support documentation, and knowledge articles.
Perform account, device, mailbox, access, and group lifecycle tasks for onboarding, transfers, offboarding, decommissioning, and secure disposal.
Gather approved requirements, resolve issues, and support integrations, in collaboration with business/system owners, technical staff.
Research platform updates and options; prepare recommendations for review addressing security, risk, dependencies, supportability, cost, and impact.
Respond to escalated requests and after-hours emergencies through restoration and documentation; support continuous operation of critical services.
Provide technical evidence for audits, assessments, and remediation activities; share system knowledge and procedures with technical colleagues.