Systems & Cloud Administrator

Seamen's Society For Children and Families•New York, NY

8d•$77,000 - $80,000•Onsite

About The Position

The Systems & Cloud Administrator administers and supports the Agency’s Microsoft cloud, identity, endpoint, application, and Windows systems environment. The position serves as the primary Tier 2 and Tier 3 escalation resource for issues involving Microsoft 365, Microsoft Entra ID, Microsoft Intune, Windows systems, cloud applications, authentication, endpoint compliance, and related technology services. The role implements approved technology changes, performs advanced troubleshooting, supports cybersecurity and recovery operations, develops and maintains operational automation, and participates in technology projects.

Requirements

Bachelor’s degree in information technology, computer science, or a related discipline preferred.
Three to five years of progressive technology support, systems administration, cloud administration, or related experience.
At least two years of practical experience administering portions of a Microsoft 365, Microsoft Entra ID, Microsoft Intune, or comparable Microsoft environment.
Strong working knowledge of Microsoft 365, Entra ID, Intune, Windows Server, Active Directory, Group Policy, authentication, multifactor authentication, and single sign-on.
Ability to troubleshoot complex identity, endpoint, cloud, application, and Windows-system issues.
Practical PowerShell scripting and automation skills and the ability to document configurations, scripts, procedures, and technical changes.
Understanding of endpoint security, patch management, vulnerability remediation, DNS, DHCP, TCP/IP, switching, wireless, and firewall concepts.
Strong judgment, organization, communication, customer-service, and confidentiality skills.
Valid driver’s license preferred
Ability to travel among all Agency locations as needed.
Ability to work adjusted hours for deployments, emergencies, or scheduled technology changes as needed.
Ability to lift, transport, and install ordinary computer equipment up to 45 lbs.
Ability to perform the essential functions of the job with or without a reasonable accommodation.

Responsibilities

Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive, mailboxes, groups, licensing, permissions, and related administrative functions.
Administer Microsoft Entra ID identities, enterprise applications, approved access configurations, multifactor authentication, single sign-on, and identity synchronization.
Troubleshoot mail flow, collaboration, authentication, licensing, synchronization, application-assignment, and access issues.
Implement approved Conditional Access, authentication, identity-protection, and access changes and escalate policy exceptions or material risks.
Administer Microsoft Intune or the Agency’s designated endpoint-management platform, including approved configuration profiles, compliance policies, applications, enrollment, and update settings.
Monitor endpoint health, security, patching, and compliance and investigate devices that repeatedly fail requirements.
Administer and support assigned Windows Server, Active Directory, Group Policy, file services, DNS, DHCP, permissions, and related infrastructure.
Perform routine maintenance, monitoring, troubleshooting, capacity review, and system documentation.
Administer assigned cloud and software-as-a-service applications, including provisioning, configuration, permissions, integrations, and single sign-on.
Work with departments and vendors to diagnose application issues, translate business requirements into technical changes, and test updates before production implementation.
Develop, test, document, and maintain PowerShell scripts and other approved automation using appropriate version control, logging, credential management, and recovery practices.
Implement assigned systems, cloud, endpoint, application, and automation projects using documented testing, change-control, rollback, and validation procedures.
Support endpoint security, email security, identity protection, vulnerability remediation, and other assigned cybersecurity tools and controls.
Investigate and escalate suspicious activity, compromised accounts, malware, phishing, unauthorized access, and material security risks.
Monitor assigned backup and recovery systems, investigate failures, perform approved recovery testing, and maintain recovery procedures.
Serve as the primary escalation resource for complex endpoint, identity, cloud, Windows, and application incidents and document root causes and sustainable resolutions.
Provide technical training and knowledge transfer and participate in scheduled after-hours maintenance and emergency response as required.
Performs other duties/responsibilities as assigned within the scope of the position.