Senior Systems Administrator

Thornburg Investment Management • Cuyamungue, NM

1d

About The Position

The Senior System Administrator is a key contributor to the stability, security, and modernization of Thornburg Investment Management’s technology environment. This role partners closely with IT leadership to design, implement, and optimize enterprise infrastructure across Microsoft, VMware, AWS, and Azure platforms. A major focus of this position is driving adoption of the latest Microsoft enterprise solutions—ensuring the organization fully leverages modern capabilities across Microsoft 365, Intune, Azure AD, and related cloud and security technologies.

The Senior System Administrator is responsible for both day-to-day operational excellence and ongoing transformation of core systems. This includes ensuring high availability, robust security, and strong performance across the environment while leading continuous improvements that enhance resilience, streamline operations, and align with regulatory and organizational standards. Success in this role requires a proactive, detail-oriented professional who combines deep technical expertise with a forward-looking mindset to help advance Thornburg’s enterprise technology roadmap.

This role requires a proactive, detail-oriented professional who can balance operational excellence with forward-looking enhancements, ensuring systems are resilient, well-documented, and aligned with organizational and regulatory requirements.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent professional experience.
• 6+ years of experience supporting enterprise IT infrastructure, including data centers, virtualization, storage, networking, and server platforms.
• Experience with AWS and/or Microsoft Azure.
• Exposure to Microsoft Purview and Microsoft security solutions.
• Relevant industry certifications are a plus.
• Extensive experience administering and modernizing Windows Server environments (2016+), including patching, automation, upgrades, and lifecycle management in hybrid Microsoft ecosystems.
• Deep expertise in identity and directory services, including Active Directory, DNS, DHCP, and Group Policy, with hands-on experience advancing organizations toward Azure AD and cloud-based identity models.
• Proven experience implementing and optimizing Microsoft 365 services, such as Exchange Online, SharePoint Online, Teams, and related integrations—with a strong focus on enabling adoption of new capabilities as they are released.
• Strong proficiency with modern endpoint management, including Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM), particularly in designing compliance policies, app deployment strategies, and security baselines.
• Experience administering virtualization platforms, including VMware vSphere and VDI, with emphasis on performance, capacity, and lifecycle management.
• Hands-on experience with SaaS application security, including SSO, MFA, Conditional Access, identity governance, and continuous improvement of access and authentication controls.
• Strong understanding of enterprise security principles, including monitoring, incident response, vulnerability management, and alignment with regulatory and organizational requirements.
• Experience supporting hybrid cloud environments, including AWS and/or Microsoft Azure, with working knowledge of cloud networking, virtual machines, identity integration, and resilience strategies.
• Excellent troubleshooting, analytical, and root-cause analysis skills, with a proven ability to diagnose complex cross-platform issues.
• Strong written, verbal, and interpersonal communication skills, with an ability to collaborate across teams and contribute to technology roadmap initiatives.
• Strong sense of ownership and accountability, consistently driving systems, processes, and initiatives to successful outcomes.
• Detail-oriented and methodical, ensuring accuracy, consistency, and high-quality execution across operational and project work.

Responsibilities

• Ensure the stability, availability, and performance of enterprise systems, proactively identifying opportunities to modernize infrastructure and strengthen operational resilience.
• Administer and enhance Windows Server environments (2016+), including patching, upgrades, automation, and lifecycle management aligned with modern Microsoft platform capabilities.
• Manage and optimize core identity and directory services - Active Directory, DNS, DHCP, and Group Policy - while advancing the organization’s use of cloud-based identity solutions such as Azure AD.
• Lead the adoption and administration of Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, and related integrations, ensuring the business fully leverages new and emerging capabilities.
• Drive modernization of endpoint management through Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM), improving device compliance, security, and user experience.
• Support and optimize VMware vSphere and VDI environments, ensuring a secure, scalable, and high-performing virtualization footprint.
• Strengthen security posture across SaaS platforms, implementing and improving controls such as SSO, MFA, Conditional Access, and ongoing access governance.
• Monitor enterprise systems using modern monitoring and analytics tools, proactively diagnosing issues, identifying trends, and implementing corrective and preventative actions.
• Execute and refine backup, recovery, and disaster resilience strategies to ensure data protection and continuity across hybrid environments.
• Enforce security standards and internal policies, collaborating with IT leadership to align operational practices with regulatory and organizational requirements.
• Support planned maintenance activities, including after-hours work when necessary, to maintain secure and reliable operations.
• Collaborate across IT and business teams, sharing expertise, contributing to technology roadmap initiatives, and mentoring junior staff to help elevate team capabilities.
• Perform additional duties as needed to support technology modernization and overall business objectives.
• Participate in the Infrastructure team’s on-call shift rotation.

Benefits

• Medical, dental, and vision coverage.
• Employer 401(k) safe harbor and profit-sharing contributions.
• Work/life programs such as flexible work arrangements, flexible paid time off, paid parental leave, employee assistance plan, commuter benefits, student loan repayment program, education reimbursement program
• Community involvement opportunities.
• Onsite cafeteria.
• Onsite fitness center.
• Referral Program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level