IT System Administrator

TOA Middle • Brentwood, TN

1d • Onsite

About The Position

Tennessee Orthopaedic Alliance (TOA) is seeking an IT System Administrator responsible for TOA's on-premises and cloud server environment, Microsoft 365 hybrid tenant, identity and access management, and the enterprise voice platform. This role involves installing and maintaining server hardware and software, troubleshooting issues, remediating security vulnerabilities, and maintaining system backups and recovery testing. The IT System Administrator will also complete assignments for new projects, upgrades, break/fix, or other initiatives, and cross-train with the Network Administrator. Key responsibilities include administering physical and virtual servers, Azure Virtual Desktop, configuring monitoring software, maintaining server equipment, ensuring system backups, and maintaining technical documentation. Additionally, the role involves administering Active Directory, Microsoft 365, building single sign-on integrations, managing Microsoft Intune, file share permissions, and self-service password management tooling. The position also includes administering the cloud VoIP phone system, maintaining phone schedules, voicemail transcription services, and configuring overhead paging systems. Security responsibilities include remediating vulnerability scan findings and applying security patches. Collaboration with vendors, managed service partners, and providing escalation support to the help desk are also key aspects of this role.

Requirements

• Associates in CSCI preferred, equivalent 4+ years' experience accepted
• 3 years server administration experience preferred
• Experience administering Microsoft 365 required
• Experience with Active Directory and Group Policy required
• Strong analytical/technical ability
• Excellent communications skills (i.e. ability to interact effectively with end users, physicians, management and co-workers)
• Strong sense of urgency and responsiveness to others while staying focused on the issues at hand
• Working knowledge of single sign-on concepts, including SAML, SCIM provisioning, and claims mapping
• Familiarity with vulnerability management and remediation workflows
• Comfortable with data migrations between systems
• Active Directory Group Policy
• Two factor authentication system (Duo)
• Comfortable scripting for administrative tasks (PowerShell preferred)

Nice To Haves

• Experience with Microsoft Intune, Azure Virtual Desktop, or Entra ID preferred
• Experience supporting a healthcare environment and HIPAA requirements preferred
• Experience with domain merges/collapse would be a plus

Responsibilities

• Administer physical and virtual servers, including storage allocation, operating system patching, software configuration, and lifecycle management
• Administer Azure Virtual Desktop, ensuring availability of host pools and that scheduled reboots and updates complete successfully
• Configure monitoring software to ensure issues are addressed proactively, and respond to correct issues
• Maintain all server grade equipment in switch closets at locations
• Ensure system backups complete successfully and perform restores and routine recovery testing as needed
• Maintain accurate technical documentation and standard operating procedures
• Administer Active Directory: manage users, groups, and devices; audit and clean up stale accounts; and maintain overall directory health using tools such as PingCastle
• Administer the Microsoft 365 environment, including users, groups, applications, and license assignment and reclamation
• Build and maintain single sign-on integrations with third party applications, including AD group mapping, SCIM provisioning, claims, and exchange of SSO values with vendors
• Administer Microsoft Intune in partnership with the desktop support team, including applications, compliance and configuration policies, and device enrollment
• Manage file share and folder permissions, including security groups, read/write access, and periodic access reviews and cleanup
• Administer self-service password and account management tooling, including certificate renewal, user enrollment assistance, and policy configuration
• Maintain Active Directory auditing and reporting tools, including data connectivity, account re-authentication, and license installation
• Administer the cloud VoIP phone system, including call routing, menus and options, call groups, and extension management
• Maintain phone schedules across all locations, including rolling phones, holiday schedules, and unplanned closures
• Administer voicemail transcription services, including adding and removing users
• Configure and support overhead paging systems at existing and new care center locations, coordinating break/fix work with the vendor
• Submit and track spam and robocall mislabeling removal requests for TOA phone numbers
• Remediate findings from routine vulnerability and threat management scans, track issues to closure, and participate in recurring review calls with our security partner
• Apply security patches and hardening standards across the server environment in support of HIPAA and organizational compliance requirements
• Cross train with the Network Administrator on both networking and server administration to better support the team as a whole
• Coordinate with third party vendors and managed service partners on escalations, projects, and new site builds
• Provide escalation support to the help desk and desktop support team as needed

Benefits

• Medical
• Dental
• Paid Time Off
• 401(k) plan with company match, safe harbor match and profit sharing match

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree