Systems Administrator

Sanctuary Wealth Group LLC•Indianapolis, IN

18d•$80,000 - $100,000•Hybrid

About The Position

The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands-on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment. The position is full-time and hybrid in Indianapolis, Indiana, and reports to the Head of IT Engineering.

Requirements

5+ years of systems or cloud administration experience, including 3+ years of hands-on Microsoft 365 administration in production environments.
Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
Strong documentation, collaboration, communication, prioritization, and change-management skills.

Nice To Haves

Experience with Microsoft 365 Copilot administration, readiness, or governance.
Multi-tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.
Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.
Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.
Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.
Bachelor’s degree in a technology-related field or an equivalent combination of education, certifications, and relevant professional experience.

Responsibilities

Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.
Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk-based access, and session controls; use report-only mode and pilot groups to reduce disruption.
Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.
Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.
Configure and maintain Microsoft Purview sensitivity labels, including site and group labels, data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.
Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data-protection risks before rollout.
Help maintain consistent security and configuration baselines across more than 100 tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.
Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.
Investigate suspicious sign-ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.
Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.
Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.
Participate in technology initiatives, migrations, and service improvements, following change-management practices and communicating impacts to stakeholders.