Job description

Own day-to-day administration of an enterprise IT environment spanning servers, networks, cloud (Azure), identity, Microsoft 365, and core business applications (including ERP). Balance proactive engineering (reliability, security, automation) with Tier 2/3 escalations to keep systems stable, secure, and performant for end users and critical operations. Full Time Permanent Up to $95,000 Salaried Hybrid Onsite 2-3 Days a Week No Sponsorship Available, Local Candidates Only JOB DUTIES • Administer Windows Server services (AD DS, DNS, DHCP, Group Policy), file/print, and certificate/PKI hygiene across on-prem and cloud. • Manage Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams), security/compliance (Defender, Purview), and tenant configuration. • Operate Azure/Entra ID (Azure AD): hybrid identity (AD Connect/Cloud Sync), Conditional Access, MFA, SSO (SAML/OAuth), RBAC. • Support device and app management via Intune/Endpoint Manager, including compliance policies, Windows Autopilot, and update rings. • Maintain virtualization (VMware or Hyper-V), storage (SAN/NAS), and backups/replication (e.g., Veeam); perform recovery testing and DR runbooks. • Support core networking in partnership with network engineering: switching/routing, VLANs, VPN/remote access, Wi-Fi, firewalls, and load balancers. • Provide ERP/application support (e.g., Dynamics, NetSuite, Epicor, SAP B1, Infor): user provisioning, roles/permissions, workflows, basic config, vendor coordination. • Handle Tier 2/3 escalations and VIP support; perform root-cause analysis, document fixes, and drive problem management to permanent resolution. • Execute patching and lifecycle management (WSUS/SCCM/MECM/Intune), server hardening, and vulnerability remediation. • Monitor health and capacity (e.g., PRTG/SolarWinds), tune performance, and respond to alerts within SLAs. • Automate routine tasks with PowerShell; create SOPs, diagrams, and accurate asset/CMDB records in the ITSM tool (ServiceNow/Jira). • Lead or contribute to projects: upgrades/migrations (server, M365, Azure), network refreshes, site builds, and hardware refresh. • Participate in on-call rotation and planned maintenance windows; communicate changes and incidents clearly to stakeholders. DESIRED QUALIFICATIONS • 4–7+ years in a Systems Administrator/Infrastructure Engineer role supporting enterprise environments. • Strong experience with Windows Server, Active Directory/Group Policy, DNS/DHCP, and hybrid identity (Entra ID/Azure AD). • Hands-on Microsoft 365 administration (Exchange Online, SharePoint, Teams) and Intune/Endpoint Manager. • Working knowledge of networking fundamentals (TCP/IP, subnets, VLANs, VPNs, DNS, firewalls) and virtualization (VMware or Hyper-V). • Proficiency with PowerShell for administration/automation. • Experience supporting at least one ERP platform (e.g., Microsoft Dynamics, NetSuite, Epicor, SAP Business One, Infor) including permissions and basic configuration. • Familiarity with ITIL/ITSM processes (incidents, changes, problems) and documentation best practices. • Excellent communication, prioritization, and customer service; able to balance operations with project delivery. Preferred • Azure IaaS and services (AVD, Azure Files, Backup/ASR), infrastructure as code basics (Bicep/ARM/Terraform). • EDR/SIEM (Defender for Endpoint, Microsoft Sentinel) and vulnerability management exposure. • macOS/Jamf and/or SCCM/MECM imaging/deployment at scale; basic Linux and SQL skills. • Relevant certifications: Microsoft (AZ-104, MS-102, SC-200/SC-900), VMware VCP, Network+/Security+, ITIL. TECHNICAL SKILLS • Directory/Identity: Active Directory, Group Policy, Entra ID (Azure AD), AD Connect/Cloud Sync, Conditional Access, MFA, SSO (SAML/OAuth). • Cloud & M365: Azure (VMs, AVD, Files, Backup/ASR), Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive), Purview, Defender, Intune/Endpoint Manager, Windows Autopilot. • Servers & Virtualization: Windows Server, VMware vSphere/ESXi or Hyper-V; SAN/NAS; Veeam or equivalent backup/replication; WSUS/SCCM/MECM. • Networking: Switching/routing, VLANs, VPN/remote access, Wi-Fi, DNS/DHCP, firewalls/load balancers (vendor-agnostic). • Applications/ERP: Microsoft Dynamics, NetSuite, Epicor, SAP Business One, Infor (user/role admin, workflows, light config); basic SQL and API/integration awareness. • Security & Monitoring: EDR/AV, patch/hardening standards, vulnerability remediation; PRTG/SolarWinds or similar; PKI/certificates. • Automation/Tools: PowerShell; ServiceNow or Jira; CMDB/asset management; documentation/diagramming tools.

Requirements