POSITION SUMMARY

The Business Systems Administrator owns the day-to-day administration of the firm's core business systems, principally Salesforce and the Microsoft 365 environment, and serves as the firm's internal technology function. The role configures and maintains these systems, administers user identity and access, manages the endpoint fleet, resolves end-user technology issues, and assembles the evidence supporting the firm's annual SOC 1 examination. The Business Systems Administrator advances the firm's mission by making certain that the people serving our ministry and faith-driven clients have systems that work, data they can trust, and technology that supports their stewardship of client relationships.

KEY RESPONSIBILITIES
• Salesforce Administration. Serve as the firm's accountable Salesforce administrator across all entities, owning user and license administration, permission sets, sharing rules, flows, reports and dashboards, sandbox testing, and the support queue for Salesforce issues.
• Microsoft 365 Tenant and Identity Administration. Administer the Microsoft 365 tenant across all entities, including Exchange Online, SharePoint, Teams and OneDrive, and own identity and access administration in Microsoft Entra ID, including conditional access, MFA, and the full employee lifecycle from provisioning to offboarding.
• Endpoint Management and Device Lifecycle. Manage the firm's Windows and macOS fleet through Microsoft Intune, including enrollment, configuration profiles, compliance policies, disk encryption, and zero-touch provisioning through Autopilot and Apple Business Manager.
• End-User Support and Service Desk. Serve as the firm's internal technology support function for all staff, triaging, resolving and documenting requests across accounts, applications, printing, conference room technology, telephony and mobile devices.
• Patch, Update and Vulnerability Remediation. Own the patching program across the endpoint fleet and track vendor security advisories relevant to the firm's technology stack.
• Network, Telephony and On-Site Support. Administer the firm's network equipment and Dialpad telephony environment, and provide hands-on support at the Colorado Springs office.
• SOC 1 and Regulatory Control Evidence. Assemble and maintain the recurring evidence supporting the firm's annual SOC 1 examination, including access reviews, onboarding/offboarding records and patch compliance reporting.
• Documentation and Automation. Maintain written runbooks and system documentation, and build automation connecting the firm's systems, including Microsoft Graph, BambooHR and Salesforce integrations.

REQUIRED QUALIFICATIONS
• Three (3) or more years of hands-on systems administration experience, or an equivalent combination of education and experience.
• Demonstrated Salesforce administration experience, including permission sets, sharing rules, flows, reports and release management.
• Demonstrated Microsoft 365 administration experience, including Entra ID identity and access management and Intune endpoint management.
• Proven ability to own systems end to end and exercise sound independent judgment on configuration and access decisions.
• Experience providing direct end-user support to non-technical colleagues with patience and clarity.
• Demonstrated discretion handling confidential employee, financial and client information.
• Ability to write documentation another person can follow and to work from written procedure.
• Ability to work in person at the firm's Colorado Springs office on a hybrid schedule, with in-office presence required for hands-on network, telephony and equipment support.

PREFERRED QUALIFICATIONS
• Salesforce Administrator certification (ADM 201) or Advanced Administrator.
• Microsoft 365 Certified: Endpoint Administrator Associate, or Identity and Access Administrator Associate.
• Experience in financial services or another regulated industry, with exposure to audit evidence collection.
• Familiarity with SOC 1, SOC 2 or comparable control frameworks.
• Experience with a cloud-native Microsoft estate: Entra join, Autopilot, conditional access, and modern device management.
• Experience migrating file shares to SharePoint, including permission remediation.
• macOS management experience alongside Windows.
• Automation or scripting experience, including PowerShell, Microsoft Graph, or low-code integration platforms.
• Bachelor's degree in information systems, computer science, business, or a related field.

COMPENSATION & BENEFITS

Pay Range: $75,000-$95,000 annually, commensurate with experience, certifications and demonstrated proficiency. This role is classified exempt under the administrative and computer employee exemptions of the Fair Labor Standards Act. Placement within the range is determined by depth of Salesforce and Microsoft 365 administration experience, certifications held at hire, regulated-industry exposure, and demonstrated automation capability. Compensation history is not requested or considered.

Benefits:
• Medical insurance via the firm's Individual Coverage Health Reimbursement Arrangement (ICHRA).
• Dental and vision coverage with national provider networks.
• Employer-provided life insurance, short-term disability, and long-term disability coverage.
• Monthly benefit allowance applicable toward employer-sponsored benefits.
• 401(k) retirement plan with employer contributions and a tenure-based matching schedule.
• Generous Paid Time Off covering vacation, sick, and personal renewal time, plus paid holidays.
• Eligibility for company profit sharing based on organizational performance.
• Reimbursement for approved certifications, licenses, and continuing education.

APPLICATION PROCESS

Qualified candidates are invited to apply through the firm's careers portal at hisenvoysgroup.bamboohr.com/careers. Applications will be reviewed on a rolling basis until the position is filled.