Systems Administrator

Systems Administrator

Reports To: Head of IT Engineering | Location: Indianapolis, IN | Work Arrangement: Full-time, hybrid
Compensation: See details below

ROLE SUMMARY
The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands-on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment.

ESSENTIAL DUTIES AND RESPONSIBILITIES
· Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.
· Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk-based access, and session controls; use report-only mode and pilot groups to reduce disruption.
· Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.
· Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.
· Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.
· Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data-protection risks before rollout.
· Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.
· Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.
· Investigate suspicious sign-ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.
· Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.
· Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.
· Participate in technology initiatives, migrations, and service improvements, following change-management practices and communicating impacts to stakeholders.

REQUIRED QUALIFICATIONS
· 5+ years of systems or cloud administration experience, including 3+ years of hands-on Microsoft 365 administration in production environments.
· Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
· Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
· Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
· Strong documentation, collaboration, communication, prioritization, and change-management skills.

PREFERRED QUALIFICATIONS
· Experience with Microsoft 365 Copilot administration, readiness, or governance.
· Multi-tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.
· Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.
· Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.
· Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.
· Bachelor’s degree in a technology-related field or an equivalent combination of education, certifications, and relevant professional experience.