ERP & Systems Administrator

VITALITY WORKS INC•Albuquerque, NM

97d•$75,000 - $85,000•Onsite

About The Position

Empower Wellness, Uphold Excellence! At Vitality Works, our mission is to empower individuals on their journey to holistic wellness through highly effective medicinal herbs, vitamins, and nutraceuticals of uncompromising quality never compromising our values or "selling out." We lead with Stewardship by preserving traditional herbalism, supporting organic farmers and ethical wildcrafters, recycling over 90% of manufacturing waste, and giving back via our Philanthropic Foundation. People-Centric collaboration fosters growth, respect, and customized service that exceeds expectations, while our pursuit of Excellence ensures honest education, transparency, and the highest standards in sustainable, ethical practices. Join our passionate team in Albuquerque, NM, producing top-tier supplements since 1982 with great benefits like PTO, health coverage, on campus gym/basketball courts, walking path, free supplements and 401k. The Microsoft 365 Administrator is primarily responsible for the administration, security, maintenance, and ongoing improvement of the organization’s Microsoft 365 environment. The role owns day-to-day administration of Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Intune, Microsoft Defender, and Microsoft Purview. This position also provides secondary support for the Deacom ERP system, Windows-based systems, end-user technology, and other business applications. As the employee develops familiarity with the organization’s environment, the role may expand into broader systems administration, infrastructure, security, and technology-project responsibilities.

Requirements

Two or more years of hands-on experience administering Microsoft 365 in a business environment.
Hands-on experience with Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, and Microsoft Intune.
Working knowledge of Microsoft 365 identity and security concepts, including multifactor authentication, Conditional Access, role-based access, endpoint compliance, and account security.
Working knowledge of Windows client environments, Active Directory, Group Policy, and general networking concepts.
Experience troubleshooting end-user, authentication, application, and access issues and working within a ticketing or IT service-management process.
Strong analytical, organizational, documentation, written communication, and follow-through skills, with the ability to protect confidential information and administrative credentials.

Nice To Haves

Microsoft 365, Endpoint Administrator, Security, CompTIA, or comparable technical certification, education, or experience.
Experience using PowerShell to administer Microsoft 365 and automate administrative processes.
Experience building workflows with Power Automate and administering SharePoint sites, permissions, lists, document libraries, or governance.
Experience supporting an ERP platform, preferably Deacom or another manufacturing ERP system.
Experience supporting IT operations in a manufacturing, regulated, or quality-controlled environment; familiarity with APIs or low-code/no-code integration platforms is a plus.

Responsibilities

Administer Microsoft 365 users, groups, licenses, administrative roles, permissions, and access throughout the employee lifecycle, including onboarding and offboarding.
Manage Exchange Online, including user and shared mailboxes, distribution groups, mail flow, email policies, retention settings, and related troubleshooting.
Administer Microsoft Teams, SharePoint Online, and OneDrive, including permissions, external sharing, storage, collaboration settings, and governance.
Manage Microsoft Entra ID identity and access controls, including security groups, multifactor authentication, role-based access, Conditional Access, and account security.
Support Microsoft Intune enrollment, device configuration, application deployment, compliance policies, and endpoint management.
Administer and monitor Microsoft Defender, Purview, audit logging, security alerts, account activity, and Microsoft Secure Score recommendations as applicable.
Perform routine access, account, license, and security reviews and maintain appropriate documentation and governance standards.
Troubleshoot Microsoft 365 application, authentication, synchronization, email, collaboration, device-management, and access issues.
Educate and assist employees with effective use of Microsoft 365 tools and established security practices.
Work with the IT Manager to continuously improve the security, reliability, governance, and end-user experience of the Microsoft 365 environment.
Use PowerShell, Power Automate, and other approved tools to automate repetitive administrative tasks and improve consistency.
Develop scripts, reports, and workflows for user administration, licensing, permissions, security, monitoring, and business processes.
Identify opportunities to improve productivity and standardize processes through Microsoft 365 technologies.
Participate in Microsoft 365 migrations, upgrades, integrations, and related technology initiatives, including secure SharePoint and Power Automate solutions.
Provide secondary administrative and end-user support for the Deacom ERP system, including user access, roles, permissions, troubleshooting, reporting, testing, documentation, and training.
Coordinate escalated ERP or business-application issues with vendors and assist with approved feature requests, system changes, data-quality efforts, and process improvements.
Provide Tier 1 and Tier 2 support for Microsoft 365, Windows endpoints, Deacom, and other approved business applications.
Configure and provision computers, mobile devices, software, peripherals, and user access as needed.
Provide secondary support for Windows administration, Active Directory, Group Policy, software deployment, patching, endpoint maintenance, and general networking services.
Maintain accurate records of configurations, licenses, assets, procedures, changes, incidents, requests, and recurring issues.
Escalate security incidents and complex technical issues in accordance with established procedures.
Assist with infrastructure, cybersecurity, business-continuity, system-upgrade, and other IT projects as needed.