Systems Administrator/Cloud Ops

DJ&A•Lakewood, CO

1d•Remote

About The Position

The Systems Administrator / Cloud Operations Engineer keeps the identity systems, cloud services, servers, and networks used by the company’s engineering, surveying, and design teams secure and operational. The company is consolidating six engineering firms onto a single Microsoft 365 identity tenant and is also consolidating its three data centers. Working alongside the senior systems engineer, this individual handles routine administration and day-to-day infrastructure operations and contributes to the tenant and data center consolidation programs. The role also provides second-level support to staff across offices and in the field, including support for specialist applications. It serves as backup for identity and network operations, with cross-training and tested coverage expectations. Responsibilities include operating and maintaining servers, virtualization, cloud workloads, storage, backup, collaboration services, and data centers; applying patches, monitoring health and capacity, responding to alerts, and conducting documented restore tests. The role supports identity and collaboration migrations, administers Active Directory, Entra ID, hybrid identity, Microsoft 365 services, and access controls, and maintains tenant security and compliance configurations in partnership with the Manager, Information Security & Compliance. It also supports a segmented compliance enclave for federal work, network and endpoint security, workstation deployment and retirement, and engineering and design applications. The position contributes to acquisition integration by executing identity and collaboration workstreams, including directory assessment, coexistence, migration, and cutover. It automates provisioning, configuration, and reporting; maintains runbooks, network diagrams, and asset inventories; and cross-trains with the senior systems engineer to provide tested operational coverage. It works within standards set by the Manager, Infrastructure & Cloud Operations, and escalates matters affecting licensing cost, the compliance boundary, or user-facing capability. Performance is measured using patch currency, restore-test completion and evidence, data center consolidation milestones, runbook coverage and cover-test results, automation rates, termination-to-access-revocation time, and access-review completion. The position is full-time and exempt. It can be based at any company office or remotely in the United States, with travel to offices and data centers as needed. Occasional after-hours or weekend work may be required for maintenance windows, migrations, and urgent issues; the role may include an on-call rotation. The work may involve data centers, server rooms, and equipment closets, and requires the ability to lift up to 50 pounds.

Requirements

At least four years administering Windows Server, Microsoft 365, and cloud infrastructure.
Hands-on patch management, backup, monitoring, and physical data center operations, including migration and decommissioning.
Working command of Entra ID or Active Directory, conditional access, and multi-factor authentication.
Hands-on experience with VMware or Hyper-V virtualization and enterprise backup.
Solid networking fundamentals, including TCP/IP, VLANs, DNS, DHCP, firewalls, and VPNs.
Scripting and automation capability, with PowerShell at minimum, sufficient to avoid repetitive manual work.
Ability and discipline to document work so another person can follow it.
Ability to explain technical issues clearly to non-technical staff.
Valid driver’s license and ability to travel to offices and data centers as needed.
Ability to lift up to 50 pounds and work in data centers, server rooms, and equipment closets.

Nice To Haves

Hands-on involvement in a tenant-to-tenant migration or directory consolidation.
Experience with government community cloud environments or a segmented compliance enclave.
Experience supporting federal contract security requirements such as NIST SP 800-171 or CMMC.
Experience supporting AEC applications, including Autodesk, Bentley, and Esri, and high-performance CAD workstations.
Relevant certification such as Microsoft Identity and Access Administrator, Microsoft 365 Administrator Expert, Azure Administrator, CompTIA Network+ or Security+, or CCNA.
Experience with Microsoft Graph, infrastructure automation, Microsoft Purview, Intune, Entra Connect, access reviews, or tenant-to-tenant migration tooling, as applicable to the listed technical capabilities.

Responsibilities

Perform routine administration across servers, virtualization (VMware or Hyper-V), cloud workloads, storage, backup, and collaboration services.
Execute server and cloud infrastructure patch cycles and publish currency reporting.
Operate and maintain three data centers and carry out the data center consolidation program as scheduled.
Monitor infrastructure health and capacity, respond to alerts, and escalate with useful diagnostic information.
Take second-level escalations from the service desk for infrastructure, hardware, software, and workstation issues.
Execute scheduled backup restore tests, retain evidence, and maintain supporting disaster recovery procedures.
Support consolidation of operating companies into a single identity tenant, including mailbox, file, and Teams migration.
Administer Active Directory, Entra ID, hybrid identity, Group Policy, DNS, and DHCP.
Operate joiner, mover, and leaver identity lifecycle processes with reliable audit trails.
Administer multi-factor authentication, conditional access, privileged access, documented exceptions, and role- and group-based access design.
Administer Microsoft 365 configuration and health for Exchange Online, SharePoint Online, OneDrive, and Teams.
Maintain tenant-level security and compliance configuration, including data loss prevention, retention, and audit logging, in partnership with the Manager, Information Security & Compliance.
Support identity and tenant design for a segmented compliance enclave for federal work.
Maintain LAN/WAN, firewalls, VPNs, switching, and wireless across office locations, and provide network backup coverage.
Support secure remote access for hybrid and field staff; manage endpoint protection and device management; respond to and document security incidents.
Support Autodesk AutoCAD and Civil 3D, Bentley, Esri ArcGIS, and Bluebeam applications.
Image, deploy, and retire workstations, CAD workstations, laptops, and mobile devices.
Execute identity and collaboration workstreams for acquisitions, including directory assessment, coexistence, migration, and cutover.
Contribute to and improve the identity section of the acquisition integration playbook.
Automate provisioning, configuration, and reporting rather than performing repetitive work manually.
Maintain runbooks, network diagrams, and asset inventory so a competent peer or managed service provider can operate systems in the employee’s absence.
Cross-train with the senior systems engineer and test coverage for identity and network operations.
Notify IT leadership in writing of systems that only one person can operate.
Work within standards set by the Manager, Infrastructure & Cloud Operations, and escalate issues affecting licensing cost, the compliance boundary, or user-facing capability.
Travel to company offices and data centers as needed; occasionally work after hours or weekends and potentially participate in an on-call rotation.