IT Senior Systems Administrator

Racker • Town of Ithaca, NY

3d • $85,000 - $95,000 • Hybrid

About The Position

Racker is seeking an experienced Systems Administrator to own the day-to-day operation, security, and reliability of its Windows-based, hybrid-cloud IT environment. This hands-on senior role supports a multi-site organization of approximately 30 locations and covers Active Directory and identity, Microsoft 365 / Entra ID, server and endpoint management, security hardening, monitoring, co-managed network infrastructure, and backup and disaster recovery. The ideal candidate has deep Windows Server and Active Directory expertise, a security-first mindset, and the discipline to document and change-manage their work.

The IT Department supports service delivery for individuals with disabilities of all ages. This is a hybrid on-site/remote position based in Ithaca, NY. The starting salary is $85,000–$95,000, commensurate with experience.

Requirements

• At least 4 years of Windows Systems Administration experience in a production environment.
• Deep hands-on Active Directory expertise, including GPO, DNS, DHCP, replication, FSMO, and AD security.
• Strong PowerShell scripting and automation skills.
• Solid Microsoft 365 / Entra ID administration experience, including Exchange Online, Conditional Access, and MFA.
• Working knowledge of Windows Server, Hyper-V, and core networking, including DNS, DHCP, VPN, and firewalls.
• Security fundamentals, including hardening, least privilege, certificate/PKI basics, and patch management.
• Comfort with version control (Git) and disciplined documentation.

Responsibilities

• Administer on-premises Active Directory, including domain controllers, replication health, FSMO roles, Sites & Services, DNS, and Group Policy design, testing, and staged fleet rollout.
• Manage hybrid identity, including Entra Connect sync, ADFS, hybrid Azure AD join, and troubleshooting device state and PRT acquisition.
• Administer Microsoft 365 / Entra ID, including user lifecycle, licensing, Conditional Access, MFA enforcement, and Privileged Identity Management (PIM).
• Maintain service-account hygiene, review privileged groups, and enforce least-privilege access.
• Drive security-hardening initiatives, remediate penetration-test findings, and apply security baselines.
• Manage Windows Firewall policy centrally through GPO and maintain internal PKI and certificate lifecycle.
• Maintain audit trails and operator attribution for sensitive actions.
• Manage the Hyper-V virtualization fleet, server lifecycle, and storage.
• Administer multi-site network infrastructure, including Fortigate VPN tunnels, UniFi wireless and switching, DHCP, and DNS.
• Plan and deploy Windows Updates fleet-wide; monitor and orchestrate updates.
• Own backup and disaster recovery by validating jobs, managing retention, and testing restores.
• Operate and tune the Graylog SIEM and event-log pipeline; triage alerts across security platforms.
• Develop and maintain PowerShell automation.
• Maintain and extend internal operations tooling, including a custom dashboard and scheduled or automated reporting.
• Use Azure DevOps for source control, CI/CD pipelines, work tracking, and documentation.
• Maintain operational runbooks, change logs, and a knowledge-base wiki.
• Follow a methodical, change-managed approach for high-risk changes, including audit, staging, and validation.
• Provide escalation support for endpoint, identity, email, and access issues; partner with help-desk operations on SLA-tracked tickets.

Benefits

• Continuum of health care options for families and individuals.
• Funding and time for continuing education.
• Retirement investment with employer match.
• Paid vacation for school holidays and breaks.
• Paid sick time.
• 20% discount on childcare services for children/grandchildren of full-time staff.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed