System Administrator III (Identity & Endpoint Services)

Texas A&M University System•Laredo, TX

2d•Onsite

About The Position

The Systems Administrator III (Identity & Endpoint Services Architect), under direction, serves as technical lead for systems administration projects or services. Provides technical oversight for the application of and compliance with technical standards. Coordinates the technical activities of a systems administration support team. Completes reports and summaries for management and users including project status reports, problem reports, and progress summaries. Serve as the technical lead for the University's enterprise identity and endpoint management environment, including Microsoft Active Directory, Microsoft Entra ID, Microsoft Intune, Jamf Pro, and related identity services. Design, implement, and maintain secure identity lifecycle processes, authentication services, conditional access policies, device enrollment, compliance policies, and enterprise endpoint management solutions. Administer and support hybrid identity infrastructure, directory synchronization, identity governance, and modern authentication technologies. Develop and maintain enterprise endpoint configuration standards, security baselines, application deployment strategies, operating system lifecycle management, and device provisioning processes for Windows, macOS, iOS, and other supported platforms. Evaluate emerging identity, endpoint management, and cloud technologies and recommend improvements that enhance security, automation, operational efficiency, and user experience.

Requirements

Bachelor’s degree in applicable field.
Five years of related experience.
An equivalent combination of education and experience may be considered.
Knowledge of: Word processing and spreadsheet applications.
Knowledge of: Project management, mentoring, negotiation skills, basic vendor relations, advanced client relations skills, proposal writing, business acumen, persuasive communication, adaptability to change, team leadership skills, and quality assurance methodologies.
Ability to: Multitask and work cooperatively with others.
Ability to: Excellent written communication, analytical, interpersonal, and organizational skills.

Nice To Haves

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a closely related field.
Experience administering enterprise Microsoft Active Directory and Microsoft Entra ID environments.
Experience with enterprise endpoint management solutions, including Microsoft Intune and Jamf Pro.
Experience implementing identity and access management (IAM) technologies, including multi-factor authentication (MFA), single sign-on (SSO), and Conditional Access.
Experience administering Microsoft 365 cloud services and hybrid identity environments.
Experience developing PowerShell automation and systems administration scripts.
Experience leading enterprise infrastructure or endpoint management projects.
Experience supporting higher education or other large enterprise environments is preferred.
Enterprise Microsoft Active Directory architecture and administration.
Microsoft Entra ID (Azure Active Directory), hybrid identity, and cloud identity services.
Identity and Access Management (IAM) principles and technologies.
Microsoft Intune, Windows Autopilot, and enterprise endpoint management.
Jamf Pro, Apple Business Manager, and Apple device lifecycle management.
Microsoft 365 administration and cloud technologies.
Group Policy, Conditional Access, Microsoft Defender, and enterprise security best practices.
PowerShell scripting and systems automation.
Enterprise PKI, certificate management, and authentication technologies.
Windows Server administration and virtualization technologies.
Enterprise endpoint security and compliance management.
Design and administer enterprise identity and endpoint management solutions.
Analyze and troubleshoot complex identity, authentication, endpoint, and cloud infrastructure issues.
Lead technical projects involving enterprise identity, cloud services, and endpoint modernization.
Develop automation solutions that improve operational efficiency.
Communicate complex technical concepts to technical and non-technical audiences.
Establish enterprise standards and technical documentation.

Responsibilities

Provides technical guidance and oversight for server administration. Sets-up and configures large and complex servers, develops complex system logic and configuration, and conducts complex server performance analyses and tuning. Coordinates routine audits of systems and software.
Oversees and coordinates the analysis of system logs. Helps coordinate and monitor the problem management process to include backup support. Troubleshoots complex network problems. Provides Tier III support.
Provides technical oversight for the development of plans for large server hardware and software purchases. Develops specifications and plans for large and complex purchases of server hardware.
Oversees the process used to document server support methods, procedures, and configuration.
Creates, evaluates, and approves plans for the implementation of new technology deployments and system integration testing.
Oversees the maintenance of system security for protecting and recovering client data. Develops disaster recovery plans for complex systems.
Coordinates the evaluation of new technologies. Makes recommendations based on the evaluation of new technologies based on client needs.
Collaborates with the project leader to develop work plans and time schedules for projects including outlining phases, identifying personnel, and computing equipment requirements.
Serve as the technical lead for the University's enterprise identity and endpoint management environment, including Microsoft Active Directory, Microsoft Entra ID, Microsoft Intune, Jamf Pro, and related identity services.
Design, implement, and maintain secure identity lifecycle processes, authentication services, conditional access policies, device enrollment, compliance policies, and enterprise endpoint management solutions.
Administer and support hybrid identity infrastructure, directory synchronization, identity governance, and modern authentication technologies.
Develop and maintain enterprise endpoint configuration standards, security baselines, application deployment strategies, operating system lifecycle management, and device provisioning processes for Windows, macOS, iOS, and other supported platforms.
Evaluate emerging identity, endpoint management, and cloud technologies and recommend improvements that enhance security, automation, operational efficiency, and user experience.