Systems Administrator & Support Lead

Safehold Inc. • New York, NY

2h • $130,000 - $170,000 • Onsite

About The Position

Safehold Inc. is seeking a highly skilled, adaptable, and service‑oriented Systems Administrator & Support Lead to oversee the firm’s IT infrastructure while serving as the primary point of contact for all end‑user support. This role requires a versatile, multi‑disciplinary IT professional capable of operating across cybersecurity, networking, hardware, software, cloud services, and daily support operations. This individual plays a critical role in maintaining operational stability, delivering exceptional user experience, and supporting the evolving technology needs of the organization.

Requirements

• 4–6+ years of combined systems administration and end‑user support experience in a fast‑paced, high‑demand environment
• Experience administering Microsoft 365, including Exchange Online, Teams, SharePoint, OneDrive, Intune, and M365 security/compliance features (preferred)
• Hands‑on experience with Entra ID, Active Directory, Group Policy, Conditional Access, MFA, and SSO/SAML integrations for SaaS applications
• Proficiency with endpoint management tools such as Intune for enrollment, compliance, device configuration, and application deployment
• Deep understanding of Windows 11, workstation hardware, imaging, and enterprise device deployment processes
• Experience with network fundamentals, including DHCP, DNS, VPNs, firewalls, routing, switching, and wireless technologies
• Experience configuring and supporting enterprise VPN platforms (Fortinet preferred), including profile creation, MFA integration, and remote access troubleshooting
• Experience supporting iOS and Android devices, MDM enrollment, email/mobile app setup, and coordinating with mobile providers for provisioning and service management
• Demonstrated ability to troubleshoot across the full technology stack—hardware, OS, networking, identity, cloud services, and SaaS applications—with the ability to perform root‑cause analysis
• Experience coordinating with MSPs and SaaS vendors for escalations, issue resolution, and service management
• Proficiency with PowerShell or similar automation/scripting tools (preferred)
• Familiarity with Azure identity, security, and cloud integrations (preferred)
• Experience creating clear, user‑friendly documentation, user guides, runbooks, and training materials
• Experience with ticketing systems such as Zendesk, including accurate logging, categorization, and documentation of all issues
• Cybersecurity experience working with endpoint protection tools, vulnerability scanners, MDR/SOC partners, or security platforms (preferred)
• Excellent communication, customer service, and stakeholder‑management skills, with the ability to support non‑technical and executive users
• Highly organized, detail‑oriented, and able to work independently while managing multiple priorities
• Results‑driven, self‑motivated, and able to perform effectively in fast‑paced environments such as finance, investment, or trading (preferred)
• Commitment to continuous learning and staying current with emerging technologies and best practices

Responsibilities

• Review, analyze, and resolve security alerts, vulnerabilities, and threat notifications, ensuring timely remediation and incident follow‑up
• Manage the firm’s cybersecurity awareness program, including KnowBe4 training campaigns, phishing simulations, user enrollment, tracking completion, and generating compliance or audit reports.
• Manage all identity and access platforms, including Entra ID, Active Directory, Group Policy, MFA, Conditional Access policies, SSO integrations for SaaS applications, and authentication/authorization workflows
• Administer and support the full Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint, OneDrive, Intune endpoint management, security/compliance configurations, application policies, and end‑to‑end user lifecycle operations
• Manage the firm’s cloud‑based infrastructure and on‑premises firewalls, switches, networking components, and connectivity services
• Configure, maintain, and support remote access and VPN services (Fortinet), including profile creation, policy updates, MFA integration, and troubleshooting connectivity issues for remote users.
• Coordinate with external providers—including MSPs for Azure and networking, SaaS vendors, and security service partners
• Leverage AI‑assisted tools (e.g., Microsoft Copilot, ChatGPT) to streamline workflows, improve operational processes, enhance documentation quality, and support continuous improvement efforts across the organization
• Provide documentation, evidence, and remediation support for internal and external audit and compliance reviews
• Manage patching and updates for operating systems, applications, endpoints, and servers to maintain a secure and compliant environment
• Troubleshoot and resolve issues across the full infrastructure stack—including endpoints, servers, virtualization, storage, networking, remote access, WAN acceleration, and security tools—while identifying and implementing root‑cause fixes to prevent recurrence
• Oversee asset lifecycle management, including procurement, inventory tracking, licensing, warranty management, and timely replacement of end‑of‑life hardware
• Develop scripts and automations (e.g., PowerShell, Graph API, Intune automations) to streamline provisioning, reporting, and remediation, reducing manual effort and operational overhead
• Serve as the primary point of contact for all technology support issues, delivering Tier 1–3 support through the ticketing system, in‑person requests, and remote support tools
• Own the full onboarding and offboarding process, including account provisioning/deprovisioning, hardware preparation, device assignment, application access setup, and end‑user training
• Maintain accurate logging and tracking of all support requests in the Zendesk ticketing system, ensuring proper categorization, documentation, and follow‑through
• Build, image, configure, and deploy laptops and mobile devices, ensuring consistent baselines, security compliance, and proper enrollment into Intune and endpoint management systems
• Install, diagnose, repair, maintain, and upgrade hardware, software, peripherals, mobile devices, and printers to ensure optimal performance and reliability
• Support workstation and office equipment, including docking stations, monitors, webcams, headsets, and other peripherals, ensuring proper configuration and connectivity
• Provide comprehensive mobile device support, including iOS/Android troubleshooting, MDM enrollment via Intune, device policies, email setup, and coordination with mobile carriers such as Verizon and AT&T for activations, line changes, SIM swaps, and service escalations
• Create and deliver end‑user training, documentation, and user guides, including onboarding materials, and process documentation
• Support the firm’s document library and data workflows, including permission issues, collaboration needs, structured storage, access troubleshooting, and content‑related support
• Provide support for SaaS and line‑of‑business applications, including access issues, SSO troubleshooting, permissions, and vendor escalations
• Identify patterns and recurring support issues, implementing root‑cause fixes, configuration changes, or process improvements to reduce repeat incidents
• Support conference rooms and collaboration tools, including displays, meeting hardware, A/V equipment, and Microsoft Teams Rooms functionality
• Provide executive‑level support, ensuring high‑quality technical assistance when issues arise
• Collaborate with cross‑functional teams (HR, Finance, Legal, Operations) to address system-related issues, improve workflows, and support technology-driven initiatives

Benefits

• The Company offers PTO, Paid Sick Time Off, and Paid Holidays, the terms of which are set forth in company policies.
• Full-time employees are also eligible to participate in various benefit plans, including medical, dental, vision, life, disability insurance, and 401K; in each case in accordance with the terms of the applicable plans.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 51-100 employees