Position Purpose

The Systems Administrator is a hands-on, employee-facing member of the Information Technology (IT) team responsible for the administration, support, security, and continuous improvement of Microsoft cloud, identity, endpoint, server, and related infrastructure and technology platforms. This position supports Pohlad Companies and affiliated or supported entities across multiple companies, locations, and two Microsoft 365 tenants.

This role serves as a technical escalation resource for the IT Support team and supports efforts to maintain a secure, reliable, and well-managed technology environment. The position is responsible for operational reliability, secure configuration, identity and privileged access administration, patching and vulnerability remediation, initial security alert triage and technical response, disaster recovery support, and clear documentation of systems, configurations, and controls. The role requires sound judgment, strong communication, and the ability to balance customer service, operational needs, and appropriate security practices.

Essential Functions

An individual must be able to perform each essential function in a satisfactory manner. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position.

• Act as an escalation point for the IT Support team.
• Communicate application problems and issues to key stakeholders, including management.
• Maintain, support, and improve the performance and reliability of software and applications across the organization.
• Assist IT Leadership on strategic projects with research, documentation, and execution.
• Monitor hosted platforms and apply security patches, configuration updates, and operational best practices as needed.
• Enhance the end-user experience through new technology, processes, and training materials.
• Assist with endpoint and desktop configuration to support a consistent and effective end-user experience.
• Document, track, and monitor technical issues to ensure timely resolution.
• Maintain documentation and tracking of IT standards, technical controls, remediation items, and system changes.
• Support and comply with information security policies and procedures and assist in educating users on cybersecurity best practices.
• Support the IT Manager in the operation and continuous improvement of the information security program and recommend practical technical remediation for identified security risks.
• Implement approved information security policies, standards, and technical controls across supported systems and Microsoft cloud services.
• Administer and maintain identity and access controls, including Entra ID, MFA, Conditional Access, privileged access, and related account security controls.
• Administer endpoint security controls through Intune and Microsoft Defender, including endpoint containment and remediation when required.
• Respond to security alerts escalated by the vSOC provider and Microsoft security platforms; perform initial internal triage, technical validation, containment, and escalation as appropriate.
• Provide technical incident response support, including remediation, evidence collection, system changes, and coordination with the IT Manager, vSOC provider, and network vendor.
• Administer and maintain server platforms and associated patching; assess, prioritize, and remediate applicable vulnerability findings, validate remediation, and escalate unresolved risk to the IT Manager.
• Coordinate firewall, network segmentation, and other network security changes with the network vendor, and coordinate internal response for network-related security incidents.
• Support the organization's security awareness program and assist users and IT Support with security-related questions and escalations.
• Provide technical evidence and remediation support for audit, compliance, and cyber insurance activities.
• Partner with the IT Manager in developing and maintaining disaster recovery plans, providing technical expertise on system dependencies, recovery procedures, testing, documentation, and execution of technical recovery activities.
• Other duties as assigned.

Required Knowledge, Skills & Abilities

• Aptitude for serving others, listening, and demonstrating empathy.
• Ability to build effective working relationships with others.
• Strong working knowledge of Microsoft 365 administration, Active Directory, Microsoft Entra ID, and related cloud and identity services.
• Experience administering and supporting Microsoft Teams and related collaboration services.
• Working knowledge of Microsoft 365 security administration, including MFA, Conditional Access, Intune, Microsoft Defender, Microsoft Purview, privileged access, and related security controls.
• Ability to document technical configurations, procedures, troubleshooting steps, and operational processes clearly and consistently.
• Ability to independently prioritize and manage multiple technical responsibilities across supported companies, locations, and Microsoft tenants.
• Ability to perform initial security alert triage, technical validation, containment, vulnerability remediation, and escalation to the IT Manager or external security partners when appropriate.
• Ability to coordinate effectively with the vSOC provider and network vendors and translate security findings into practical technical remediation actions.
• Attention to detail and thoroughness.
• Demonstrated ability to learn and adapt to new technologies and platforms.
• Excellent organizational, written and verbal communication skills.
• Strong interpersonal skills, integrity, sound judgment, flexibility, resourcefulness, problem-solving ability, initiative, and a results-oriented approach.

Education and Experience (minimum qualifications)

• Associate's or Bachelor's degree in computer science, information systems, cybersecurity, or a related field, or an equivalent combination of education and relevant work experience.
• Minimum of 5 years of progressive IT experience, including systems administration, Microsoft 365 administration, cloud services, servers, endpoints, networking, or related infrastructure responsibilities.
• Demonstrated hands-on experience administering Microsoft 365, Entra ID, Intune, Microsoft Defender, servers, and related infrastructure in a multi-tenant environment.
• Demonstrated experience supporting security controls, vulnerability remediation, incident response, and security operations activities, including coordination with external security providers.
• Relevant Microsoft, cybersecurity, networking, or infrastructure certifications are preferred.

Work Environment

While performing the duties of this job, the employee will work primarily in an office environment. The noise level in the work environment is usually light. Remote support for multiple companies, locations, and Microsoft tenants is required. Travel to supported locations, including Twin Cities locations and out-of-state locations, may be required occasionally.

Physical Demands (with or without reasonable accommodations)

While performing the duties of this job, the employee may be prone to sitting for lengthy periods of time. The employee is regularly required to talk or hear. The employee is frequently required to stand, walk, sit; use hands to handle or feel; and reach with hands and arms. Specific vision abilities required by the job include close vision. Lifting requirements may include lifting and/or moving up to 50 lbs.

At Pohlad Companies, we offer a comprehensive and competitive benefits package which reflects our commitment to supporting the health, financial stability, and overall well-being of our employees. The range of benefits are designed to help employees thrive both professionally and personally, and include:

401(k) & matching; Medical, Dental, Vision Insurance; Disability & Life Insurance; PTO, Paid Holidays & Parental Leave for both Parents; Tuition Reimbursement.