Systems Administrator- Enterprise Applications & Endpoint Management

St John's Preparatory School•Danvers, MA

2d•Onsite

About The Position

St. John’s Prep is an inclusive, Catholic, Xaverian Brothers Sponsored School for young men in grades 6 through 12. Founded on the Xaverian values of compassion, humility, simplicity, trust, and zeal, we educate students to be, do and stand for good in the world. We enroll approximately 1,500 students from more than 90 communities in Massachusetts, New Hampshire, and Maine. St. John’s is a faith-based community grounded in and fortified by three main cultural priorities: recognizing all people as created in the image and likeness of God, embracing a habit of excellence grounded in a growth mindset, and empowering individuals to be unique expressions of God’s love in the world. Strong candidates will embody the Catholic principles and Xaverian values that guide our institution to help foster a supportive and inclusive campus environment. For further information on how faith animates St. John’s, please visit our Statement on Xaverian and Catholic Identity. Position Overview and Responsibilities The Systems Administrator- Enterprise Applications & Endpoint Management is responsible for the administration, configuration, integration, security, and ongoing support of the institution's enterprise applications and managed endpoint environment. This position reports to the Associate Director of IS and serves as the technical owner for Blackbaud, Canvas, Jamf Pro, and other mission-critical systems while ensuring secure, reliable, and efficient technology services for faculty, staff, and students. The role works closely with academic and administrative departments to optimize business processes, improve user experience, and maintain the institution's technology ecosystem. This position is a full-time, year-round salaried position.

Requirements

Bachelor's degree in Information Technology, Computer Science, Information Systems, or equivalent professional experience.
3–5+ years of experience administering enterprise applications and endpoint management platforms.
Experience administering Blackbaud (Education Management, SIS, Financial Edge, Raiser's Edge, or related products).
Experience administering Canvas LMS in an educational environment.
Significant experience managing Apple devices using Jamf Pro, Jamf Safe Connect, Jamf Safe internet, and Apple School/Business Manager.
Experience supporting Google Workspace, Active Directory/Azure AD, and Single Sign-On solutions.
Knowledge of enterprise application integrations, APIs, scripting, and automation.
Experience with endpoint security, software deployment, compliance management, and lifecycle management.
Strong analytical, troubleshooting, and customer service skills.
Excellent written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.
Experience supporting K-12 or higher education environments.
Jamf 200/300 certification or equivalent experience.
Experience with Google Workspace for Education, Zoom, and educational technology platforms.
Knowledge of PowerShell, Bash, Python, or API-based automation.
Familiarity with cybersecurity best practices, endpoint detection, and mobile device management.
Experience participating in enterprise software implementations and cross-functional technology projects.
Standing/sitting for long periods of time.
Bending, lifting, pushing, kneeling, crouching, crawling, stooping.
Must be able to lift up to 50 pounds.
Must be able to reach at and above shoulder height to access higher areas of equipment, etc.
Must be capable of adapting to frequent changes in position throughout the workday.
Hearing and speaking to exchange information in person or on the telephone.
Use of hands and fingers for manipulation, and using computer keyboard, educational tools, play equipment, and perform first aid and CPR.
Specific vision abilities required include close vision, distance vision, color vision, and depth perception.

Responsibilities

Administer, configure, and maintain enterprise applications including Blackbaud, Canvas LMS, Google Workspace, Zoom, and other institutional software platforms.
Serve as the primary administrator for Blackbaud, managing security roles, workflows, forms, imports/exports, system configuration, user provisioning, reporting, and vendor coordination.
Administer the Canvas Learning Management System, including SIS integrations, permissions, user accounts, and faculty, staff, student, and parent technical support.
Configure and maintain integrations between enterprise applications using APIs, SFTP, and automation tools to ensure secure and reliable data synchronization.
Develop and maintain automated workflows that improve operational efficiency and reduce manual processes.
Create and maintain reports, dashboards, and data extracts that support academic, financial, and operational decision-making.
Maintain documentation, change management records, and application standards.
Administer Jamf Pro and oversee the lifecycle management of macOS devices, iPads, Apple TVs, and other Apple technologies across campus.
Develop and maintain configuration profiles, policies, package deployments, compliance standards, and security baselines for managed devices.
Manage device deployments with a preference on a zero-touch workflow using Jamf Pro, Apple School Manager, and volume application licensing.
Configure application deployment, patch management, operating system updates, and software inventory through Jamf Pro.
Implement and maintain device security controls including FileVault, activation lock management, certificate deployment, restrictions, and compliance policies.
Manage end user data backups through CrashPlan and Google Drive.
Support and troubleshoot managed devices while working with the Help Desk to resolve escalated endpoint issues.
Monitor endpoint health, software compliance, and asset inventory, ensuring accurate lifecycle documentation.
Evaluate and implement new endpoint management capabilities to improve user experience and security.
Maintain Papercut printserver and all peripheral printers on campus.
Manage identity lifecycle processes including user provisioning, role-based access, Google Workspace administration, Active Directory/Azure AD synchronization, and Single Sign-On (SSO).
Administer authentication, MFA, and access control policies across enterprise platforms.
Monitor system performance, availability, and integration health while proactively resolving issues.
Coordinate vendor support cases and third-party application implementations.
Maintain technical documentation, knowledge base articles, and standard operating procedures.
Provide Tier II and Tier III support for enterprise applications, endpoint management, and identity services.
Collaborate with MSP to ensure enterprise systems operate securely and efficiently.
Participate in after-hours maintenance windows and provide on-call support as required.
Perform basic troubleshooting of security systems, ensuring continued access for all campus users, and 100% uptime.