JOB DESCRIPTION

JOB TITLE: Systems Administrator FLSA STATUS: Exempt

REPORTS TO: Director, IT

SUMMARY

The Systems Administrator is responsible for securing, administering, and continuously improving the company's infrastructure and Microsoft M365 environment across corporate offices and 12 manufacturing plants in the United States, Mexico, and Vietnam. This position owns day-to-day cyber security administration, identity and access controls, M365 tenant governance, endpoint management, and the full lifecycle of Microsoft and other critical system updates. The role works closely with plant leadership, IT team members, vendors, and business users to protect company systems, reduce operational risk, and keep technology platforms reliable, current, and aligned with business needs.

RESPONSIBILITIES AND DUTIES

• Own administration, security, governance, and lifecycle management for all Microsoft M365 environments, including Entra ID, Exchange Online, SharePoint, OneDrive, Teams, Intune, Defender, Purview, licensing, domains, and connected services.
• Administer and strengthen cyber security controls including multi-factor authentication, conditional access, privileged access, endpoint protection, vulnerability management, email security, data protection, and user access reviews.
• Own, update, and track all cyber security KPI's and executive reporting. Act as the lead for all information security audits and certifications (TISAX, T.R.A.C.K., etc).
• Own Microsoft and other update management across endpoints, servers, M365 Apps, browsers, third-party applications, firmware, drivers, and other supported platforms to maintain security, stability, and compliance.
• Develop, document, and execute patching standards, maintenance windows, testing procedures, rollback plans, and reporting for corporate and plant environments.
• Monitor security alerts, system health, update compliance, and vulnerability exposure; investigate issues and coordinate remediation with internal teams and external partners.
• Administer identity services including Active Directory, Entra ID, group policy, security groups, role assignments, device registration, and account lifecycle processes.
• Manage endpoint configuration and compliance using tools such as Intune, Microsoft Defender, Windows Update for Business, Autopatch, Configuration Manager, or equivalent platforms.
• Support and secure Windows servers, virtual infrastructure, storage, backups, network services, and plant systems that rely on Microsoft technologies.
• Partner with plant IT and operations teams to schedule updates and security changes in a way that protects production uptime while reducing technology risk.
• Implement and maintain M365 security features such as anti-phishing policies, safe links and attachments, retention, DLP, audit logging, eDiscovery support, and secure collaboration settings.
• Create and maintain technical documentation, standards, inventories, diagrams, change records, and operational procedures for systems, M365, patching, and security administration.
• Participate in incident response, root cause analysis, disaster recovery exercises, and business continuity planning for infrastructure and M365 services.
• Coordinate with vendors and service providers to resolve escalated technical issues, validate recommended updates, and ensure support agreements meet company needs.
• Provide technical support and training to IT team members and end users on secure system use, M365 functionality, and update-related changes.
• Continuously evaluate new Microsoft features, security recommendations, update channels, and automation opportunities that improve reliability, visibility, and cyber security posture.

EDUCATION AND EXPERIENCE

A successful candidate will possess five plus years of experience. Demonstrated collaboration with teams and individuals.

SKILLS AND ABILITIES:

• Strong working knowledge of Microsoft M365 administration, Entra ID, Exchange Online, SharePoint, OneDrive, Teams, Intune, Defender, and Microsoft security portals.
• Experience administering Windows Server, Active Directory, group policy, DNS, DHCP, certificate services, file services, and common enterprise infrastructure platforms.
• Practical knowledge of patch management, vulnerability remediation, endpoint configuration, software deployment, and change control in a multi-site environment.
• Ability to use PowerShell, Microsoft admin centers, reporting tools, and automation to improve accuracy, speed, and repeatability of administrative work.
• Understanding of cyber security principles including least privilege, zero trust, MFA, conditional access, endpoint detection and response, email security, logging, and incident response.
• Ability to balance security requirements with manufacturing uptime, plant schedules, and business continuity needs.
• Strong troubleshooting skills across identity, endpoint, server, application, network, and cloud service boundaries.
• Clear written and verbal communication skills with the ability to document standards, explain technical risk, and work effectively with users at all levels.
• Ability to manage multiple priorities, follow through on operational commitments, and respond calmly to urgent technical or security events.
• Willingness to participate in after-hours maintenance, emergency response, and occasional travel to support plant operations.
• Possesses the ability to gather and analyze information and make decisions from a limited number of choices as demonstrated by a minimum score of 50 on the Wonderlic Select Assessment (Traditional score of 26 on the cognitive portion).
  • • • Agree to complete all post-hire required training.

TRAVEL REQUIREMENTS

This position may require occasional travel, up to 15%, to manufacturing locations in the United States, Mexico, and Vietnam. After-hours work may be required for maintenance windows, updates, security events, and business-critical incidents.

DISCLAIMER

The information contained in this job description is not intended to be an all-inclusive list of the duties and responsibilities of the job, nor are they intended to be an all-inclusive list of the skills and abilities required to do the job. Management may, at its discretion, assign or reassign duties and responsibilities to this job at any time.

REV. 7/30/2026