Senior Systems Administrator I

Biofire•Broomfield, CO

15d•$11,000 - $130,000•Onsite

About The Position

As a Senior Systems Administrator I at Biofire, you will run identity, device, and SaaS systems day to day and help keep core on-premises and cloud infrastructure reliable. You will implement improvements to access and endpoint management, automate routine work, and build passwordless access and recovery practices that scale with the company. You will work independently on routine changes and collaborate with TechOps leadership on changes with wider impact. Success in this role includes extending the group-based access rollout, automating joiner, mover, and leaver workflows, completing device policy cleanup, and documenting and testing recovery for critical services. You will split your time between planned projects and complex Help Desk escalations, improve the team’s ability to resolve recurring issues, and communicate risks and blockers early. This is a full-time, salaried role based onsite about four days a week at Biofire’s dog-friendly headquarters in Broomfield, Colorado. The role will include regular time at Armory 1, a manufacturing facility in Thornton, once it opens. There is no standing on-call rotation, but occasional urgent incidents may require after-hours response. The role handles information subject to US Export Control Regulations; applicants must meet the listed US citizenship, permanent residency, asylee, or refugee eligibility criteria.

Requirements

At least 4 years in IT, including 2 years in a systems administration role in a business environment.
Hands-on Microsoft Entra ID or comparable identity administration, such as Okta, including group-based access, joiner/mover/leaver processes, and SSO/SCIM integrations.
Windows endpoint management in Intune, including enrollment, compliance, apps, and updates, and Apple device administration in an MDM such as Mosyle or Jamf.
Administrative automation with PowerShell, Python, or APIs, plus clear documentation and the ability to help a Help Desk team learn.
Experience operating production server or cloud services, including patching, monitoring, backups, and tested restores, with working knowledge of networking fundamentals.
Applicants must be a US citizen, lawful permanent resident, or a person admitted into the United States as an asylee or refugee, because the role handles information subject to US Export Control Regulations.

Nice To Haves

Microsoft certifications such as SC-300, MD-102, or AZ-104.
Passwordless sign-in experience with FIDO2 security keys or Windows Hello for Business.
Experience in manufacturing or other regulated environments, including ISO 27001 controls.

Responsibilities

Run Microsoft Entra ID, including Conditional Access, groups, SSO, and SCIM, and implement role-based access across the company while documenting exceptions.
Automate joiner, mover, and leaver workflows with PowerShell, Microsoft Graph, Azure Automation, or similar tools, and report on access health.
Manage Windows, Mac, and iOS devices in Intune and Mosyle, including enrollment, compliance, apps, updates, and policy documentation.
Maintain TechOps-managed on-premises and cloud-hosted servers, networks, and production-floor IT systems, including scheduled patching, monitoring, and backups.
Document and test recovery runbooks for critical services; lead technical triage and restoration for TechOps incidents in line with the incident plan, including occasional urgent after-hours response.
Resolve Tier 2 Help Desk escalations and reduce recurring issues through root-cause fixes, runbooks, and training.
Balance scoped improvement projects with operational and incident work, assess dependencies and rollback plans before high-impact changes, and raise project risks early.