IT MANAGER/SENIOR SYSTEMS ADMINISTRATOR

Job Description
Role: IT MANAGER/SENIOR SYSTEMS ADMINISTRATOR

Location: New York City, NY or Old Greenwich, CT (5 Days a Week Onsite)

Duration: Fulltime

Core responsibilities
• Identity and access governance: Lead the administration of Active Directory architecture, group design, and the service-account estate: service principal names, Entra ID application registrations, Graph API access, and credential rotation through our password vault. Maintain existing access standards, run periodic access and service-account reviews, and evaluate and process access exceptions in accordance with established approval procedures.
• File and storage services: administer the Windows and Samba file-server estate across headquarters, the offsite datacenter, and remote offices; manage capacity, quotas, and monitoring; plan and execute server and share migrations; oversee archiving, backup, and data-governance tooling.
• Email and collaboration platforms: administer Microsoft 365 and Exchange Online, including mail routing, mail security and filtering, DLP, retention and journaling, and the Teams, SharePoint, and OneDrive estate.
• Server and virtualization infrastructure: build, patch, and maintain the Windows Server estate on VMware vSphere; hands-on work with physical server hardware including racking, cabling, diagnostics, and component replacement.
• Network and perimeter: Administer and troubleshoot TCP/IP, DNS, DHCP, VLANs, wireless networks, certificates, and infrastructure-monitoring platforms. Configure, monitor, and manage firewalls to enforce access controls and protect the corporate network against unauthorized access and cyber threats. Manage telecom and ISP vendor relationships.
• Security operations: administer endpoint protection, data-governance, and email-security platforms; manage multi-factor authentication, conditional access, and geographic access restrictions; run the security-awareness and phishing-simulation program; respond to alerts and vulnerabilities.
• eDiscovery and legal hold: perform mailbox and file searches in support of subpoenas, regulatory requests, and litigation; preserve, collect, and produce data under the direction of counsel and Compliance, handling all of it with strict confidentiality.
• Telephony and voice services: support the current Avaya PBX, associated analog lines, and voice-service vendors; troubleshoot and coordinate resolution of telephony incidents, provisioning, and office moves. Assist with the planned transition of PBX operations to an outsourced provider and oversee the vendor relationship thereafter.
• Automation: use PowerShell and Python to automate provisioning, reporting, and task scheduling, and maintain our enterprise job scheduling platform.
• License, subscription, and vendor governance: Oversee software and cloud-service entitlements, licensing, renewals, procurement, and vendor relationships. Review user licensing and assignments across platforms such as Adobe, Box, Microsoft 365/Intune, Visual Studio, Verizon, Bloomberg, and similar services. Recommend and implement subscription changes that appropriately align user access, device-management, security, operational needs, and vendor-licensing requirements.
• Project and vendor coordination: Own the technical delivery of internal and vendor-led infrastructure and security projects from requirements gathering, scoping, resource planning, testing, and implementation through acceptance and documentation. Define and maintain project plans, timelines, dependencies, risks, action items, and internal and vendor resource needs; track progress, escalate issues, and coordinate stakeholders through completion.
• Change management and IT control reviews: Maintain accurate records of material infrastructure, configuration, and access changes across on-premises systems, AWS, and managed-service-provider environments. Perform monthly reviews of Active Directory group membership, workstation configuration, local administrator access, server assignments, and system usage and monitoring; investigate and remediate discrepancies; and document findings, approvals, exceptions, and follow-up actions.
• IT security oversight and policy compliance: Maintain operational controls that support IT policies, client and regulatory due-diligence questionnaires (DDQs), and external security representations. Ensure documented policies, DDQ responses, and day-to-day practices remain aligned. Monitor and validate controls for password and credential rotation, service accounts, least-privilege access, patching and reboot compliance, and the documentation, approval, and periodic review of exceptions.
• Technical leadership and escalation: Route and prioritize support tickets, help coordinate support coverage and issue resolution, and serve as the technical escalation point for IT support staff. Mentor junior team members and promote clear documentation, consistent operational practices, and timely risk escalation.
• Facilities and critical-environment infrastructure: monitor and coordinate the power, cooling, and environmental systems supporting office technology rooms and server rooms, including UPS units, PDUs, circuits, temperature/humidity monitoring, and HVAC. Coordinate with building management, datacenter providers, electricians, and HVAC vendors during incidents, maintenance, capacity changes, and planned shutdowns.

Skills and qualifications

• In-depth knowledge of MicrosoftWindows Server, Active Directory, Microsoft 365, MS Teams, andMulti-Factor Authentication.
• Hands-on experience administeringnon-human identity: service accounts, service principal names, Entra IDapp registrations, and credential lifecycle management.
• Experience with VMware vSpherevirtualization.
• Strong experience administeringWindows file servers and network storage at scale - permissions, quotas,capacity monitoring, and migrations.
• Strong understanding of email flowand mail security, including routing, spam, malware, and DLP; hands-onexperience with a secure email gateway (Proofpoint, Mimecast, or similar).
• Strong understanding of networkingconcepts and protocols (TCP/IP, DNS, DHCP, VLANs, etc.), coupled withexperience in configuring, monitoring, and managing firewalls to securethe corporate network, and enforce access controls.
• Experience with endpoint protectionand data-governance platforms (CrowdStrike, Varonis, or similar).
• Proficiency with PowerShell forinfrastructure automation, reporting, and administration.
• Hands-on experience with physicalserver hardware, including racking, structured cabling, hardwarediagnostics, and component replacement (disks, memory, power supplies,etc.).
• Working knowledge of the power andenvironmental requirements of server rooms and network closets, includingUPS systems, rack PDUs, electrical capacity, cooling, temperature/humiditymonitoring, and escalation to facilities, datacenter, and buildingvendors.
• Proven experience as a SystemsAdministrator or similar role, with 7+ years managing enterprise ITinfrastructure in a hands-on environment.
• Experience supporting DR,backup/restore testing, infrastructure monitoring, change control, anddocumented operational procedures.
• Experience operating and evidencingIT controls in a regulated or audited environment, including accessreviews, change management, exception management, and policy compliance.
• Demonstrated experience withsoftware and cloud-license governance, entitlement reviews, vendorrenewals, and cost-conscious subscription management.
• Proven ability to lead technicalprojects and coordinate internal stakeholders, managed service providers,and other vendors from scope through implementation.
• Strong organizational skills, withthe judgment to identify control gaps, document risks, drive remediation,and communicate status clearly to technical and non-technicalstakeholders.

Preferred qualifications

• Bachelor's degree in ComputerScience, Information Technology, or related field (or equivalentexperience).
• Experience in financial services oranother regulated, audited environment.
• Exposure to eDiscovery, legal hold,or regulatory production processes.
• Experience with cloud computingplatforms such as AWS or Azure is a plus.
• Experience with configurationmanagement tooling (Ansible, PowerShell DSC, or similar) is beneficial.
• Familiarity with market dataplatforms, particularly Bloomberg administration and entitlements.
• Familiarity with Avaya PBXadministration, analog/POTS lines, and telecom vendor coordination.

What we're looking for

• Excellent problem-solving skills andattention to detail.
• Strong communication andinterpersonal skills, including the ability to explain technical issues tonon-technical stakeholders.
• Discretion and sound judgment whenhandling confidential company, employee, and legal data.
• A practical, service-oriented approach;able to balance competing priorities, document work clearly, and escalaterisks appropriately.
• Comfortable serving as a technicalescalation point and mentoring junior IT staff.

Working arrangements

• On-site only - this is not a remoteor hybrid role.
• Occasional scheduled after-hourswork for patching windows and recovery testing.
• Ability to move and install ITequipment and work in server rooms, wiring closets, and office locationsas needed.
• If located in NYC, must have abilityto travel to CT or our DR site in Westchester as needed.