System Administrator

Alexander & Baldwin•Honolulu, HI

About The Position

The System Administrator is an individual contributor role that supports the maintenance of production environments, supports users, and contributes to ongoing modernization initiatives across cloud and endpoint platforms. This role supports a hybrid identity environment with Active Directory hosted on Azure IaaS, synchronized to Microsoft Entra ID and Microsoft 365 via Entra Connect. The organization is transitioning toward a cloud-native identity model. There is a strong emphasis on Microsoft technologies, identity management, server management, endpoint management, and security operations. This role is responsible for the daily administration, maintenance, laptop/endpoint management and optimization of the organization’s core IT systems and cloud services. The System Administrator works with the Director of Technology Solutions, internal stakeholders, and third-party vendors to support reliable, secure, and scalable system operations.

Requirements

2–4 years of experience in system administration in a Microsoft-centric environment.
Hands-on experience with: Microsoft 365 (Exchange, Teams, SharePoint)
Microsoft Entra ID / Hybrid identity environments
Microsoft Defender suite
Microsoft Intune
Experience supporting Azure infrastructure, including virtual Windows machines and foundational cloud services.
Familiarity with Microsoft Purview or similar compliance and governance tools.
Experience supporting enterprise end-user environments and troubleshooting application issues.
Familiarity with hybrid identity user lifecycle management, including Active Directory, Entra ID synchronization, and Microsoft 365 account administration.
Working knowledge of Active Directory, Group Policy, DNS, DHCP, and identity synchronization tools.
Experience with scripting/automation (PowerShell preferred).
Awareness of security best practices, patching, and vulnerability management.
Strong troubleshooting, analytical, and problem-solving skills.
Excellent communication skills, both technical and non-technical.
Ability to manage multiple priorities in a fast-paced environment.
Bachelor’s degree in Information Technology or related field, or equivalent experience.

Nice To Haves

Exposure to security operations practices and working with tools/providers such as Expel is preferred.

Responsibilities

Administer and maintain Microsoft 365 (M365) services, including Exchange Online, SharePoint Online, Teams, and OneDrive.
Assist in managing identity services, including Microsoft Entra ID/Azure AD.
Perform user lifecycle operations in a hybrid Active Directory/Entra ID environment, including account provisioning, offboarding (account deletion, mailbox conversion to shared, license recovery), group membership management, and Intune device wipes/retirements.
Support the administration of Microsoft Defender security suite and MDR system to monitor, detect, and respond to security threats.
Assist in maintaining Azure environments: Managing Azure landing zone, Supporting Windows machines, Monitoring performance, availability, and cost optimization.
Administer Microsoft Intune (endpoint management), including device provisioning, configuration policies, and compliance enforcement.
Support Microsoft Purview for governance, compliance, and data protection initiatives.
Provide end-user support for Microsoft applications, including troubleshooting issues across the M365 application suite.
Work with managed security providers (including Expel) to monitor and respond to security incidents.
Perform system monitoring, patching, upgrades, and lifecycle management across cloud and endpoint environments.
Troubleshoot and resolve system, application, and user-related issues in a timely manner.
Document system configurations, processes, and procedures; maintain accurate technical documentation.
Assist in system implementation projects, upgrades, and migrations.
Ensure adherence to security policies, compliance requirements, and best practices.
Support internal teams and external vendors in implementing and maintaining infrastructure solutions.
Provide on-call or after-hours support for system issues as needed.
Respond to help desk tickets alongside other members of the team.
Manage the full lifecycle of company-owned endpoints, including imaging, provisioning, software deployment, domain joining, patch management, asset tracking, and decommissioning of laptops and desktops for employees and contractors.