IT Senior System Administrator - Ann Arbor, Michigan

Introduction: The Senior Systems Administrator is responsible for the day-to-day operational health, reliability, and security of ZOLLER's IT infrastructure. This role balances hands-on ticket resolution with structured project delivery, supporting a modern Microsoft-centric environment across cloud, identity, endpoint, and networking domains. The role works in close collaboration with the Information Security team to implement infrastructure security remediations and ensure alignment with ISO 27001 controls and applicable EU regulatory requirements including CRA, NIS2 and GDPR.

Responsibilities:

Operational Support (∼50%)
• Serve as an escalation point for Tier 2/3 incidents across Windows, Linux, Network (Forti products), Microsoft 365, and Azure environments.
• Manage and resolve tickets within defined SLA targets, ensuring thorough documentation and root-cause analysis for recurring issues.
• Administer user accounts, groups, roles, and access rights via a hybrid Microsoft Entra ID (Azure AD), enforcing least-privilege principles.
• Maintain endpoint health and compliance through Microsoft Intune, including device configuration profiles, compliance policies, and application deployment.
• Monitor infrastructure alerts and respond proactively to availability, performance, and capacity issues.
• Support the IT helpdesk team on complex escalations and provide mentorship on technical resolution approaches.

Project Delivery (∼50%)
• Lead and contribute to infrastructure projects including cloud migrations, network upgrades, identity modernization, data classification, security upgrades, and endpoint management improvements.
• Design, implement, and document solutions within Microsoft Azure including virtual machines, AVD, storage, networking, and Azure-based services.
• Participate in infrastructure architecture reviews, contributing to scalable and secure design decisions.
• Develop and maintain runbooks, standard operating procedures, and infrastructure documentation in alignment with ISO 27001 documentation requirements.
• Coordinate with vendors and managed service partners on project delivery and escalations.

Security Collaboration
• Partner with the Information Security team to implement and validate infrastructure security remediations identified through risk assessments, audits, or vulnerability management processes.
• Support the application of Conditional Access policies, MFA enforcement, and identity protection controls within Microsoft Entra ID.
• Assist with patch management processes, ensuring timely remediation of vulnerabilities across servers, network devices, and endpoints.
• Contribute to audit evidence collection and control testing activities in support of ISO 27001 certification and CRA/NIS2 compliance obligations.
• Adhere to and enforce the organization's Acceptable Use Policy and information security policies.

General
• Perform other duties as reasonably required by the team lead, commensurate with the seniority of the role.
• Maintain professional development in line with emerging technologies and evolving security requirements.

Requirements:

Technical Skills
• Must be legally authorized to work in USA - Sponsorship is not available for this role
• Minimum 5 years of experience in a systems administration or infrastructure engineer role.
• Strong hands-on expertise with Microsoft Windows Server (2016/2019/2022): AD DS, DNS, DHCP, Group Policy, DFS.
• Proficiency in Microsoft 365 administration: Exchange Online, SharePoint Online, Teams, and OneDrive.
• Demonstrated experience with Microsoft Entra ID (Azure Active Directory): user/group management, Conditional Access, MFA, SSPR, and hybrid identity.
• Working knowledge of Microsoft Azure: virtual machines, virtual networks, Azure Monitor, resource groups, and role-based access control (RBAC).
• Experience with Microsoft Intune for endpoint management: device enrolment, compliance policies, configuration profiles, and app deployment.
• Solid understanding of networking fundamentals: TCP/IP, VLANs, routing, switching, firewalls, VPN, and DNS/DHCP.
• Ability to write and maintain PowerShell scripts for automation and administration tasks.
• Experience working within a ticketing / ITSM system (e.g. Jira Service Management, ServiceNow, or equivalent).

Professional & Interpersonal
• Demonstrated ability to manage competing priorities across operational and project workloads.
• Strong written and verbal communication skills; able to document clearly for both technical and non-technical audiences.
• Experience working within or alongside an information security framework (ISO 27001, NIST, or similar) is advantageous.
• Self-directed with a structured, methodical approach to problem-solving and change management.
• English language proficiency.

Preferred Qualifications
• Experience with Linux server administration (Ubuntu, RHEL, or equivalent) in a production environment.
• Microsoft certifications: AZ-104 (Azure Administrator), MS-102 (Microsoft 365 Administrator), SC-300 (Identity and Access Administrator), or equivalent.
• Familiarity with SIEM platforms, endpoint detection tools, or vulnerability management solutions.
• Exposure to DevOps tooling (Azure DevOps or GitHub)
• Experience in manufacturing, industrial automation, or regulated industry environment.
• Proficient in the German language.

This is a full-time position offering competitive salary commensurate with one's experience, 401K with employer contribution, health and dental insurance, PTO and paid holidays. ZOLLER also offers: Work/life balance, great work atmosphere, powerful PC's, 2 UHD screens, newest software and ergonomic workstations. We are interested in a long-term commitment.