IT Senior Systems Administrator

Racker • Ithaca, NY

3d • Hybrid

About The Position

Racker is seeking an experienced Systems Administrator to own the day-to-day operation, security, and reliability of its Windows-based, hybrid-cloud IT environment. This hands-on senior role covers Active Directory and identity, Microsoft 365 / Entra ID, server and endpoint management, security hardening, monitoring, co-managed network infrastructure, and backup/disaster recovery across approximately 30 locations. The IT Department supports service delivery for individuals with disabilities of all ages.

This is a hybrid on-site/remote position based in Ithaca, New York. The starting salary is $85,000–$95,000, commensurate with experience.

The role administers on-premises and hybrid identity systems; drives security hardening and compliance work; manages virtualization, servers, storage, network infrastructure, updates, backups, and disaster recovery; operates monitoring and automation tools; maintains documentation and change-management practices; and provides escalation support for endpoint, identity, email, and access issues.

Requirements

• At least 4 years of Windows Systems Administration experience in a production environment.
• Deep, hands-on Active Directory expertise, including GPO, DNS, DHCP, replication, FSMO, and AD security.
• Strong PowerShell scripting and automation skills.
• Solid Microsoft 365 / Entra ID administration experience, including Exchange Online, Conditional Access, and MFA.
• Working knowledge of Windows Server, Hyper-V, and core networking, including DNS, DHCP, VPN, and firewalls.
• Security fundamentals, including hardening, least privilege, certificate/PKI basics, and patch management.
• Comfort with version control (Git) and disciplined documentation practices.

Responsibilities

• Administer on-premises Active Directory, including domain controllers, replication health, FSMO roles, Sites & Services, DNS, and Group Policy design, testing, and staged fleet rollout.
• Manage hybrid identity systems, including Entra Connect sync, ADFS, hybrid Azure AD join, and related troubleshooting.
• Administer Microsoft 365 / Entra ID, including user lifecycle, licensing, Conditional Access, MFA enforcement, and Privileged Identity Management.
• Maintain service-account hygiene, privileged-group reviews, and least-privilege access.
• Drive security-hardening initiatives, remediate penetration-test findings, and apply security baselines.
• Centrally manage Windows Firewall policy through GPO and maintain the internal PKI and certificate lifecycle.
• Maintain audit trails and operator attribution for sensitive actions.
• Manage the Hyper-V virtualization fleet, server lifecycle, and storage.
• Administer multi-site network infrastructure, including Fortigate VPN tunnels, UniFi wireless and switching, DHCP, and DNS.
• Plan and deploy Windows Updates fleet-wide and monitor and orchestrate updates.
• Own backup and disaster recovery, including validating jobs, managing retention, and testing restores.
• Operate and tune the Graylog SIEM and event-log pipeline, and triage alerts across security platforms.
• Develop and maintain PowerShell automation.
• Maintain and extend internal operations tooling, including a custom dashboard and scheduled or automated reporting.
• Use Azure DevOps for source control, CI/CD pipelines, work tracking, and documentation.
• Maintain operational runbooks, change logs, and a knowledge-base wiki.
• Follow a methodical, change-managed approach for high-risk changes, including audit, staging, and validation.
• Provide escalation support for endpoint, identity, email, and access issues, and partner with help-desk operations on SLA-tracked tickets.

Benefits

• A continuum of health care options for families and individuals.
• Funding and time for continuing education.
• Retirement investment with employer match.
• Paid vacation for school holidays and breaks.
• Paid sick time.
• 20% discount on childcare services for children/grandchildren of full-time staff.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed