Systems Administrator | Cloud Infrastructure & Security

KPFF Consulting Engineers•Seattle, WA

1d•$95,000 - $125,000•Hybrid

About The Position

KPFF is seeking a Systems Administrator to join our Shared Services IT team in Seattle. This role is primarily focused on Tier 1 and Tier 2 end user support, desktop engineering, endpoint management, and deployment automation, while also contributing to Microsoft cloud administration, identity and access management, security operations support, and infrastructure projects as needed. The Systems Administrator will serve as a key member of the IT team, helping maintain and improve the firm's Microsoft 365, Azure, and security environments while supporting KPFF employees and contributing to technology initiatives that support KPFF's ongoing modernization and cloud transformation efforts. This position is ideal for a technically strong IT professional who enjoys balancing day-to-day support and administration with automation, security, and infrastructure improvement projects. As KPFF continues to modernize and expand its cloud-first technology environment, this role offers the opportunity to grow into broader infrastructure, cloud, and security responsibilities while helping shape the future of Shared Services IT.

Requirements

3+ years of experience in systems administration, infrastructure support, cloud administration, or a related IT role.
Hands-on experience administering Microsoft 365 environments, including Exchange Online, Teams, SharePoint, and OneDrive.
Experience administering Microsoft Azure and Microsoft Entra ID environments.
Experience managing user accounts, permissions, identity, and access controls.
Demonstrates a professional and approachable desktop support demeanor, with the patience, courtesy, active listening, and clear communication skills needed to assist users effectively.
Takes ownership of support requests and follows through until each issue is fully resolved.
Experience with PowerShell scripting and task automation.
Understanding of networking fundamentals including DNS, DHCP, VPNs, firewalls, and authentication technologies.
Strong troubleshooting, documentation, and communication skills.
Ability to work independently and manage competing priorities.

Nice To Haves

Experience supporting multi-site organizations.
Experience with Microsoft Intune or other endpoint management platforms.
Experience participating in cloud migration or infrastructure modernization projects.
Exposure to security operations, vulnerability management, or compliance programs.
Familiarity with SASE, Zero Trust, and modern identity security concepts.
Familiarity with Egnyte, Fortinet, Arctic Wolf, or similar platforms.
Familiarity with both Microsoft and Apple hardware / operating systems is a plus.
CompTIA Security+
CompTIA Network+
Microsoft AZ-900
Microsoft SC-900
Fortinet, Cisco, Palo Alto, or similar networking/security certifications

Responsibilities

Provide Tier 1 and Tier 2 technical support for KPFF employees.
Support employee onboarding, offboarding, account provisioning, and hardware deployment.
Manage user accounts, licenses, permissions, and endpoint configurations.
Troubleshoot workstation, application, connectivity, and authentication issues.
Work with senior IT staff to automate endpoint deployment and management.
Partner closely with senior IT staff to provide operational coverage, support infrastructure and security initiatives, and help ensure continuity across key IT functions.
Support endpoint management through Microsoft Intune and Apple Business Manager, including device enrollment, compliance policies, software deployment, and lifecycle management.
Administer and support Microsoft 365 services including Exchange Online, Teams, SharePoint, OneDrive, and related platforms.
Support Azure and Microsoft Entra ID administration, including user lifecycle management, permissions, group management, and identity governance.
Assist with access management, role assignments, authentication policies, and security controls.
Troubleshoot cloud service, identity, and access-related issues.
Assist with monitoring, reviewing, and triaging security alerts generated by internal tools and managed security providers.
Support security investigations, incident response activities, and remediation efforts.
Participate in periodic access reviews and least-privilege initiatives.
Help maintain security policies, controls, and operational procedures.
Collaborate with senior IT staff on security and compliance initiatives.
Develop and maintain PowerShell scripts to automate administrative and operational tasks.
Identify opportunities to improve efficiency through automation and standardization.
Create and maintain documentation, runbooks, and standard operating procedures.
Contribute to continuous improvement of IT processes and service delivery.
Participate in technology initiatives including: Microsoft Entra ID migration efforts, Enterprise file services initiatives, including ongoing Egnyte migration and administration efforts, Endpoint management improvements, Secure Access Service Edge (SASE) initiatives, Azure-based infrastructure projects.
Assist with testing, deployment, validation, and user adoption activities.
Support implementation of new technologies and operational processes.