IT Systems Administrator

Role Overview

• Serve as the internal point of contact for all team member technical issues — device problems, login access, troubleshooting, and “how do I…?” questions; resolve independently or escalate as appropriate.
• Manage and triage IT tickets, ensuring timely resolution and clear communication.
• Provide remote support across time zones: installations, connectivity, and access issues.
• Maintain internal IT documentation, FAQs, and how-to guides.
• Work with the people team to keep processes, policies, and operational documents current and communicated.
• Manage day-to-day administration of our Microsoft 365 environment — email, collaboration, and cloud productivity tools.
• Manage user accounts, groups, licenses, and roles across the M365 tenant.
• Implement and maintain policies for data loss prevention, retention, secure collaboration, and conditional access.
• Structure M365 resources to support collaboration while enforcing least-privilege access.
• Administer centralized identity, device management, and directory services.
• Manage MFA enrollment, enforcement, and troubleshooting.
• Monitor and triage third-party vendor SOC alerts, escalating as appropriate.
• Manage endpoint security: agent deployment, health monitoring, and alert triage.
• Implement and enforce access control standards — least privilege, role-based access, and regular access reviews.
• Maintain accurate asset inventory, reconciling against vendor records; manually track non-laptop assets such as monitors and other home office equipment.
• Partner with the internal technology team to support investigation of any potential internal anomalous behavior.
• Manage the lifecycle of company devices — primarily laptops — from procurement and provisioning through reuse and secure disposal.
• Standardize device build configurations aligned to security and compliance requirements.
• Ensure all devices meet required security baselines: disk encryption, EDR, OS patching, and local admin controls.
• Collaborate with the people team to deliver a consistent, high-quality onboarding experience for new hires.
• Prepare and ship devices; create accounts and assign role-based access.
• Enroll users and devices in required security and identity systems.
• Own the technical offboarding process: account disablement, access removal, data handoff, and device recovery.
• Maintain and regularly refine onboarding and offboarding checklists to reduce risk and ensure nothing falls through the cracks.
• Serve as an additional technology team contact for key IT and security vendors.
• Help manage the inventory of software licenses and SaaS subscriptions, ensuring the right number of seats and tiers.
• Identify and reclaim unused licenses; flag opportunities to consolidate or optimize tools.
• Track renewals and entitlements; support finance and leadership on budgeting and capacity planning.
• Maintain and update IT and InfoSec policies in collaboration with the CTO and the broader technology team.
• Ensure policies align with how the environment is actually configured, closing gaps between written policy and practice.
• Maintain clear, current documentation on architectures, standards, and procedures.
• Monitor the health of core IT systems and security controls; respond to alerts and anomalies.
• Identify recurring issues and drive root-cause fixes rather than one-off workarounds.
• Look for opportunities to automate repetitive tasks — through scripts, workflows, policy templates, or AI-assisted tools.
• Stay current on best practices for identity, endpoint security, and M365 administration.

Requirements

• 1–3 years of experience in an IT, systems administration, or helpdesk role supporting a remote or distributed workforce.
• Working knowledge of Microsoft 365: Exchange Online, Teams, SharePoint, OneDrive, and security & compliance tools.
• Familiarity with identity/directory/MDM platforms (e.g., JumpCloud, Intune, Okta, or similar).
• Familiarity with MFA tools (e.g., Duo, Microsoft Authenticator, or similar).
• Familiarity with endpoint security / EDR solutions (e.g., SentinelOne, CrowdStrike, Defender, or similar).
• Basic understanding of identity and access management, endpoint security, and networking fundamentals (VPN, DNS, firewalls).
• Ability to write clear documentation, runbooks, and end-user instructions.
• Strong communication and service orientation — comfortable supporting non-technical users and explaining tradeoffs.
• Ability to work independently, manage multiple priorities, and know when to escalate.

Tech Stack

• Cloud
• DNS
• Firewalls

Benefits

• Competitive compensation plan and total rewards package for team members.
• Remote workforce.
• Generous paid time off plan and floating holidays.
• Paid parental leave.
• Employer paid premiums for both team members and their dependents for medical, dental, and vision.
• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits.
• Professional development and career advancement opportunities.
• We prioritize employee growth and development through a robust performance management platform to provide ongoing coaching, clear feedback, recognition, and opportunities for career growth.