We are only considering local candidates or those willing to relocate.
Duties:Perform duties and responsibilities including, but not limited to:
- IT Infrastructure Administration and Support
- Administration and implementation of IT Infrastructure including networks, servers, Microsoft tenant, Entra, Active Directory and more
- Setup and ensure LAN/WAN system and services are compliant with the organization's guidelines and procedures including SD-WAN, VLAN segmentation, and secure remote connectivity
- Monitor and ensure LAN/WAN performance meet organizational needs including performance, resiliency, and traffic routing across distributed locations
- Maintain domain name registrations and certificates needed for organization's operations including SSL certificates, SSO certificates, and expiration monitoring
- Configure email services - Microsoft Exchange Online or Server and Microsoft 365 software
- Ensure systems are properly configured and Operating Systems are updated and secure including endpoint compliance policies, patching, and device security baselines
- Provide IT support escalation for complex support issues related to IT systems, software, and hardware
- Track software usage and licensing to ensure legal compliance including Microsoft licensing, SaaS subscriptions, and vendor licensing portals
- Troubleshoot remote access connectivity issues including VPN, conditional access, and endpoint compliance-related access issues
- Security
- Create, implement, enforce, and monitor security policies, strategies, and procedures to protect the data and systems of the organization
- Configure and maintain security for all aspects of the Microsoft tenant, domain, network, servers, email, software systems, and end-user computers
- Install, configure, and maintain enterprise security platforms including Fortinet (Fortigate, FortiClient, EMS, and related services), Microsoft security tools, and endpoint protection platforms
- Implement and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA) for all major software systems including enterprise application registration, SSO configuration, certificate lifecycle management, and identity governance
- Monitor, investigate, and respond to security events and alerts across systems including firewall, endpoint, and identity platforms
- Telecommunications
- Support VOIP telecommunication system and on-going needs of organization
- Ensure voice and conferencing capabilities for headquarters and field operations is working properly and engage vendor for support and new services when needed
- Configure and troubleshoot mobile devices, connectivity, and integration to our software systems
- Software Systems Administration
- Implement and oversee Security Administration of major software systems used by organization
- Administer and support cloud-based SAAS platforms, CRM and ERP systems used across the organization including integration with SSO, user provisioning, and access control
- Utilize Intune to secure, control and manage organizational devices and applications including Autopilot deployment, Win32 application packaging, compliance policies, and device lifecycle management
- Administer all Microsoft 365 systems such as Teams, Sharepoint, OneDrive, etc. including security configuration, sharing controls, and governance policies
- Automate system administration tasks using scripting and modern tooling (PowerShell, APIs, or equivalent)
- Research and implement integrations between enterprise systems to improve efficiency and security
- Complete training or self-study to gain knowledge and/or certifications for new software systems to ensure proper administration and security
- Research and implement innovative and automated approaches for system administration tasks and operational efficiencies that will save time and effort including scripting, automation, and process optimization
- Lead and guide vendor engagement for enhanced services and support of systems
- Printing & Scanning Solutions
- Manage network printers and multi-functional printers, and printing services including cloud printing systems
- Interface with vendors to ensure equipment is serviced and supported
- Documentation and Training
- Maintain detailed documentation of network and system configurations
- Create standard operating procedures and best practices
- Communicate and train staff and ITS team members on IT Infrastructure and Systems
- Data Backup Services
- Manage data backups of critical systems and maintain offsite/cloud data storage including cloud backup platforms and protection against data loss or ransomware
- Test and verify data backups; perform restoration tasks and minimum annual restoration test including periodic validation of restore procedures and recovery timeline
- Other
- Remain current with industry related technology standards and best practices
- Participate in strategy planning and implement solutions for new or improved IT infrastructure and software systems
- Vendor management for outsourced services and support of IT systems
- Lead projects and assignments to support the overall IT strategic plan
- Complete or participate in annual audits of IT Systems, Infrastructure and Security
- Occasional travel may be required
- Other duties and projects assigned by supervisor to support department and organizational needs
Qualifications:
- Must possess a vibrant personal relationship with Jesus Christ and agree with the Joni and Friends statement of faith
- Desire to serve in a growing and dynamic Christian service ministry
- Bachelor's degree in Computer Science or Information Technology OR Associate's degree and 3-5 relevant IT Certifications required
- 5+ years of complex network and system administration work experience required
- Three or more IT certifications related to administration of Microsoft services, Identity Management, Network Services, IT/Cyber Security, CRM or ERP systems are required
- Strong experience with Microsoft Entra ID (Azure AD), including Conditional Access, SSO, and identity governance
- Experience managing firewall and network security platforms, preferably Fortinet (FortiGate, EMS, and FortiClient)
- Experience with endpoint management using Microsoft Intune, including device provisioning and application deployment
- Proven proficiency in network, system and server administration including server virtualization and management of cloud services is required
- Working knowledge and experience implementing and supporting Microsoft Active Directory and Microsoft Entra ID (Azure AD) in a hybrid and/or cloud-first environment is required
- Experience with security monitoring, log analysis, and incident response across identity, endpoint, and network systems
- Experience with scripting or automation (PowerShell or equivalent) strongly preferred
- Expert knowledge of networking concepts, protocols and security is required
- Knowledge and 3+ years' experience supporting VOIP telecommunications systems and mobile device configuration is required
- The ability to install and upgrade hardware systems, learn new software systems, train others to use the systems and coordinate multiple projects simultaneously is required
- Ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines is required
- Good judgment required in recognizing and maintaining confidentiality of sensitive information
- Must enjoy working with others in a team environment and be flexible to meet the requirements of the department and ministry
- Must be dependable, cooperative, flexible, and exhibit enthusiasm and initiative
- Must support a flexible schedule and work evening/weekend hours when needed
- Good interpersonal communication skills both verbal and written and the ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines are necessary
- Must be detail oriented, committed to accuracy, a collaborator and self-starter who is flexible and able to work independently
- Must demonstrate a keen sense of confidentiality
- Strong general computer skills are necessary along with a competent, working knowledge of Windows, Microsoft Excel, Microsoft Word, Microsoft Outlook, and the Internet
- Understanding of Christian ministry and specifically Joni and Friends is desirable
Physical Requirements:This position primarily involves sedentary work in an office setting. The employee must be able to sit for extended periods, operate a computer and other standard office equipment, communicate clearly in person and over the phone, and occasionally stand, walk, bend, kneel or reach to access files and supplies or move items. The role may also require occasionally lifting, carrying, pushing, or pulling items and equipment up to 25 pounds.
Work is performed in a professional office setting with occasional movement throughout the facility. The environment is typically quiet to moderate in noise level, with standard lighting and temperature conditions. Employees are expected to maintain safety and ergonomic awareness while performing all tasks.
Compensation: $98,000 - $115,000 per year. This is a hybrid position working in the Agoura Hills office on Monday, Tuesday, and Thursday. Wednesday and Friday are remote workdays.
