Systems & Cloud Administrator

Seamen's Society for Children and Families•New York, NY

67d•$77,000 - $80,000•Onsite

About The Position

The Systems & Cloud Administrator administers and supports Seamen’s Society’s Microsoft cloud, identity, endpoint, application, and Windows systems environment. The position serves as the primary Tier 2 and Tier 3 escalation resource for issues involving Microsoft 365, Microsoft Entra ID, Microsoft Intune, Windows systems, cloud applications, authentication, endpoint compliance, and related technology services. The role implements approved technology changes, performs advanced troubleshooting, supports cybersecurity and recovery operations, develops and maintains operational automation, and participates in technology projects. The position is based onsite in Staten Island, New York, reports to the Chief Information Technology Officer, and may require travel among Agency locations, adjusted hours, and scheduled after-hours maintenance or emergency response as needed.

Requirements

Three to five years of progressive technology support, systems administration, cloud administration, or related experience.
At least two years of practical experience administering portions of a Microsoft 365, Microsoft Entra ID, Microsoft Intune, or comparable Microsoft environment.
Strong working knowledge of Microsoft 365, Entra ID, Intune, Windows Server, Active Directory, Group Policy, authentication, multifactor authentication, and single sign-on.
Ability to troubleshoot complex identity, endpoint, cloud, application, and Windows-system issues.
Practical PowerShell scripting and automation skills and the ability to document configurations, scripts, procedures, and technical changes.
Understanding of endpoint security, patch management, vulnerability remediation, DNS, DHCP, TCP/IP, switching, wireless, and firewall concepts.
Strong judgment, organization, communication, customer-service, and confidentiality skills.
Ability to travel among Agency locations as needed.
Ability to work adjusted hours for deployments, emergencies, or scheduled technology changes as needed.
Ability to lift, transport, and install ordinary computer equipment up to 45 lbs.
Ability to perform the essential functions of the job with or without a reasonable accommodation.

Nice To Haves

Bachelor’s degree in information technology, computer science, or a related discipline preferred.
Valid driver’s license preferred.

Responsibilities

Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive, mailboxes, groups, licensing, permissions, and related administrative functions.
Administer Microsoft Entra ID identities, enterprise applications, approved access configurations, multifactor authentication, single sign-on, and identity synchronization.
Troubleshoot mail flow, collaboration, authentication, licensing, synchronization, application-assignment, and access issues.
Implement approved Conditional Access, authentication, identity-protection, and access changes; escalate policy exceptions or material risks.
Administer Microsoft Intune or the Agency’s designated endpoint-management platform, including approved configuration profiles, compliance policies, applications, enrollment, and update settings.
Monitor endpoint health, security, patching, and compliance, and investigate devices that repeatedly fail requirements.
Administer and support assigned Windows Server, Active Directory, Group Policy, file services, DNS, DHCP, permissions, and related infrastructure.
Perform routine maintenance, monitoring, troubleshooting, capacity review, and system documentation.
Administer assigned cloud and software-as-a-service applications, including provisioning, configuration, permissions, integrations, and single sign-on.
Work with departments and vendors to diagnose application issues, translate business requirements into technical changes, and test updates before production implementation.
Develop, test, document, and maintain PowerShell scripts and other approved automation using appropriate version control, logging, credential management, and recovery practices.
Implement assigned systems, cloud, endpoint, application, and automation projects using documented testing, change-control, rollback, and validation procedures.
Support endpoint security, email security, identity protection, vulnerability remediation, and other assigned cybersecurity tools and controls.
Investigate and escalate suspicious activity, compromised accounts, malware, phishing, unauthorized access, and material security risks.
Monitor assigned backup and recovery systems, investigate failures, perform approved recovery testing, and maintain recovery procedures.
Serve as the primary escalation resource for complex endpoint, identity, cloud, Windows, and application incidents; document root causes and sustainable resolutions.
Provide technical training and knowledge transfer and participate in scheduled after-hours maintenance and emergency response as required.
Perform other duties and responsibilities as assigned within the scope of the position.
Travel among Agency locations as needed.

Benefits

13 paid holidays throughout the year, Summer Fridays, and ample paid time off.
Training programs and professional development.
Subsidized medical, dental, and vision plans.
Agency-paid life insurance.
403(b) retirement plan with agency contribution.
Tax-deferred annuity.
Commuter benefit program.
Flexible Spending Account (FSA) for medical, dental, and dependent care expenses.
Access to Plum Benefits discounts and special offers.
Employee Assistance Program for mental health, financial advice, personal well-being, and other support.
Referral program incentives.
Internship opportunities for people furthering their education in a related field.