Senior Enterprise Systems Administrator

Monterey Bay Aquarium•Monterey, CA

3d•$87,100 - $107,000•Onsite

About The Position

Under limited supervision, perform advanced hands-on administration, configuration, security, maintenance, and lifecycle support for organization-wide enterprise systems and cloud services. Serve as an advanced technical resource for complex incidents, integrations, migrations, and platform changes. Administer Microsoft 365 A5 as the foundational platform for identity, access, endpoint management, messaging, collaboration, communications, licensing, security, and integrations. Ensure services are reliable, secure, documented, and compliant with organizational standards, change control, audit requirements, and service levels; perform other duties as required.

Requirements

BS/BA degree or equivalent combination of education, training, and experience
7+ years of hands-on enterprise systems administration or closely related experience supporting production environments
Proven advanced experience administering Microsoft 365 in a complex enterprise environment, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user/access lifecycle, and rights management
Advanced knowledge of servers, storage, virtualization, cloud infrastructure, backup/recovery, monitoring, certificates, and enterprise platform operations
Strong knowledge of identity and access management, privileged access, least privilege, authentication, authorization, and directory-service concepts
Experience with endpoint enrollment, compliance, configuration, application deployment, encryption, inventory, and device lifecycle processes
Experience planning and executing system builds, upgrades, migrations, integrations, patching, and production changes
Experience with disaster recovery, restore testing, recovery objectives, business continuity, and evidence retention
Proficiency with scripting/automation and producing operational dashboards and reports
Strong knowledge of security hardening, configuration baselines, vulnerability remediation, change control, and audit support
Working knowledge of networking concepts relevant to systems administration, including name resolution, addressing, routing, secure communications, and service connectivity
Advanced troubleshooting and root-cause analysis skills across integrated enterprise services
Ability to translate business and technical requirements into secure, reliable, and supportable system configurations
Ability to work independently with limited supervision, balance competing priorities, and complete complex work reliably
Sound judgment in ambiguous or high-impact situations and ability to escalate material risk promptly
Strong written and verbal communication skills, including the ability to explain technical issues to technical and nontechnical audiences
Strong documentation, organization, and attention-to-detail skills
Collaborative service orientation and ability to work effectively with business/system owners, technical peers, vendors, and auditors
Ability to protect confidential information and maintain appropriate security, privacy, and access controls
Ability to work within and maintain Monterey Bay Aquarium's Core Values and participate in scheduled after-hours/on-call support

Responsibilities

Perform advanced administration and maintenance of enterprise servers, storage, virtualization, cloud infrastructure, directory services, certificates, monitoring, backups, and related platforms.
Configure, secure, and support Microsoft 365 A5, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user lifecycle, access, and rights management.
Diagnose and resolve complex availability, performance, authentication, configuration, integration, and security incidents; perform root-cause analysis and document corrective actions.
Design and implement approved system builds, upgrades, migrations, integrations, and configuration changes, including testing, change records, rollback plans, and production validation.
Apply and validate patching, hardening, encryption, privileged-access, least-privilege, and configuration-baseline requirements across systems and endpoints.
Operate backup, restore, and recovery capabilities; perform recovery testing, verify recovery objectives, and retain evidence supporting business continuity and disaster recovery.
Automate administration, deployment, monitoring, alerting, dashboards, and reporting to improve reliability and consistency.
Maintain architecture diagrams, inventories, configuration records, standards, procedures, runbooks, support documentation, and knowledge articles.
Perform account, device, mailbox, access, and group lifecycle tasks for onboarding, transfers, offboarding, decommissioning, and secure disposal.
Implement requirements, resolve platform issues, and support integrations, in collaboration with business/system owners, technical staff, and vendors.
Research platform updates and options; prepare evidence-based recommendations addressing security, risk, dependencies, supportability, cost, and impact.
Respond to escalated requests and after-hours emergencies through restoration and documentation; support continuous operation of critical services.
Provide technical evidence for audits, assessments, and remediation activities; share system knowledge and procedures with technical colleagues.