System Administrator

ClearOne Advantage•Phoenix, AZ

5d•Remote

About The Position

ClearOne Advantage is a fully remote debt settlement company operating in a regulated environment and maintaining PCI DSS and SOC 2 compliance. The Systems Administrator owns day-to-day administration of the company’s identity, endpoint, cloud, and business application environments. The role works helpdesk tickets directly, serves as an escalation point for Associate Systems Administrators, leads large-scale onboarding and offboarding, and contributes to IT automation, security, and documentation improvements. Applicants must live in the Pacific (PST) or Mountain (MST) time zone; applications from other time zones will be rejected. The role administers Active Directory, Entra ID, Microsoft 365, endpoint management platforms, AWS WorkSpaces, business applications, and contact center tools. It supports security and compliance activities, audits, access management, patching, backups, disaster recovery, and infrastructure changes. The administrator also writes and maintains documentation and standard operating procedures, mentors Associate Systems Administrators, plans IT projects, handles Tier 2/3 escalations, and participates in an after-hours on-call rotation.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience.
At least 5 years of hands-on IT experience, including at least 4 years in a systems administration role.
Ability to reasonably perform all duties of an Associate Systems Administrator (L1).
Strong hands-on experience administering Active Directory, Entra ID, and Microsoft 365, including Exchange Online and licensing.
Experience managing endpoints with Intune, Desktop Central, SCCM, or a comparable MDM/RMM platform, including patching and software deployment.
Experience provisioning and deprovisioning users in SaaS applications such as Salesforce, DocuSign, or similar applications.
Working knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, VLANs, VPN, and firewalls.
Scripting experience in PowerShell or a similar language.
Experience with Jira Service Management or a comparable ITSM platform, including incident and problem management.
Ability to explain technical issues clearly to non-technical users and leadership.
Ability to work independently, manage multiple priorities, and thrive in a fast-paced, rapid-growth environment.
Willingness to participate in an on-call rotation.
Must live in the Pacific (PST) or Mountain (MST) time zone.

Nice To Haves

Experience administering NICE InContact (CXone) or another contact center or dialer platform.
Experience implementing SCIM provisioning and SSO (SAML or OIDC) with Entra ID, Okta, or a similar identity provider.
Experience administering or working with AI tools such as Claude, ChatGPT, or Microsoft Copilot, including access, licensing, and usage policies.
Experience with AWS, especially AWS WorkSpaces.
Experience with Teramind or other employee monitoring tools.
Experience supporting macOS in a mostly Windows environment.
Experience in a regulated industry such as financial services.
Experience mentoring junior IT staff.
Certifications such as Microsoft 365 Administrator (MS-102), Azure Administrator (AZ-104), CompTIA Security+, or AWS Certified SysOps Administrator.

Responsibilities

Administer Active Directory and Entra ID, including OU structure, group policy, security groups, and hybrid synchronization.
Administer Microsoft 365, including licensing, Exchange Online mailboxes and mail flow, Teams, SharePoint, conditional access, and MFA policies.
Design, automate, and maintain onboarding and offboarding workflows, including SCIM-based provisioning and deprovisioning, bulk provisioning, and same-day deprovisioning.
Administer access, seat assignments, and licensing for business applications including Salesforce, DocuSign, GitHub, NICE InContact (CXone), and AI tools.
Conduct periodic access reviews, enforce least privilege, and approve or escalate elevated access requests.
Manage IP whitelisting for internal use and external partners.
Administer Microsoft Intune and Desktop Central (ManageEngine Endpoint Central) for device enrollment, compliance policies, software deployment, and patching.
Build and maintain workstation images and Autopilot or zero-touch deployment processes for Windows and macOS.
Own patch compliance reporting and remediation across the endpoint fleet.
Oversee hardware lifecycle, inventory accuracy, shipping, and redeployment.
Administer and support corporate VPN and remote access, and assist with migration from VPN to Zero Trust Network Access.
Create and maintain AWS WorkSpaces and support related AWS resources, including IP whitelisting in security groups.
Maintain backups, verify restores, and participate in disaster recovery planning and testing.
Support network and firewall changes with networking resources, including VLAN, DNS, DHCP, and VPN configuration.
Support DevOps-related work, including GitHub repository and access management and maintaining cloud resources with the DevOps team.
Administer and provide escalation support for InContact (CXone), Teramind, Tableau, FTP, and secure file transfer.
Coordinate with vendors on application issues, upgrades, and renewals; maintain application and license inventories and optimize licenses.
Administer endpoint security and monitoring tools and respond to security alerts with IT leadership.
Review and implement Microsoft Defender security recommendations and track remediation of vulnerabilities and misconfigurations.
Support audits, policy enforcement, and evidence collection for access and change management.
Conduct regular license and seat audits across Microsoft 365, Salesforce, AI tools, and other SaaS applications, reclaiming unused seats and maintaining accurate license counts.
Conduct regular Active Directory audits covering stale and disabled accounts, group memberships, and privileged access.
Partner with Security Engineers on vulnerability remediation and patch compliance across endpoints and servers.
Contribute to IT automation, including SCIM provisioning and automating repetitive reporting and license cleanup tasks using PowerShell, Microsoft Graph, or similar tools.
Create and maintain system documentation, runbooks, and knowledge base articles; write new IT process SOPs and submit them for review and approval before publication.
Work helpdesk tickets in Jira Service Management as part of a round-robin rotation and act as the Tier 2/3 escalation point for complex incidents, identifying root causes of recurring problems.
Triage requests on Jira boards owned by other pods, routing tickets to the appropriate team and handling IT-related work.
Support offshore users and collaborate with local IT teams to troubleshoot and resolve issues across time zones.
Mentor and train Associate Systems Administrators and review their access and endpoint work.
Plan and own IT projects such as migrations, rollouts, and infrastructure upgrades.
Participate in the after-hours on-call rotation.
Stay current on technologies and best practices to strengthen team and individual capabilities.