#LI-AS1d

Summary of position

Under the supervision of Sr. Director - IT & Security, the Systems Administrator II leads administration and governance of North Shore Health's cloud-based infrastructure and Microsoft 365 ecosystem, including identity, security, endpoint management, networking, and cloud hosted virtual workloads, in a fully cloud first environment.This role owns tenant governance standards, policy lifecycle, compliance alignment (HIPAA/DHS/CMS), documentation, and change oversight. The administrator serves as the technical liaison for incidents, change requests, and platform improvements, ensuring Security and infrastructure improvements are actioned and coordinating remediation across stakeholders. Coordinates regularly with Security, Compliance/Privacy, IT leadership, MSP partners, and Tier 1/2 support staff

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the

essential functions.
• System administration: Ensure reliability, performance, and security of NSH's IT infrastructure (cloud infrastructure and virtual compute workloads - IaaS/PaaS Govern tenant-wide identity & access (Entra ID), conditional Access strategy, privileged access, and exception registers, coordinate changes
• Tenant Governance & Policy Lifecycle: Lead administration and governance of Microsoft 365 tenant (Entra ID, Exchange, Teams, SharePoint, OneDrive, Defender, Purview). Lead security/compliance policy lifecycle across Defender & Purview (labels, DLP, retention/eDiscovery); review monthly Secure Score & CIS findings; track remediation

o This role has approval authority for tenant-level governance standards, security

controls, and change decisions within established NSH policy
• Security & Compliance Posture: Drive Secure Score improvements and coordinate risk

remediation with Security/Compliance; ensure HIPAA/DHS/CMS alignment across

controls.January 2026

o Support platform standardization decisions (e.g., Defender/E5 stack options) with

analysis and recommendations to leadership
• Endpoint Compliance Standards: Own endpoint compliance standards and device

management policies.

o Own endpoint compliance baselines and configuration standards; coordinate

deployments and user-side activities; report compliance metrics
• Change & Release Oversight: Manage change advisory cadence, establish a standard

change catalog, and ensure documentation of currency for all tenant changes.

o Manage Change Management (CAB); maintain standard change catalog, pilot rings,

and rollback plans; sign off on production changes and documentation currency
• Documentation & Audit Readiness: Maintain architecture maps, SOPs, KBs, and audit

evidence for identity, security, and compliance; ensure deliverables are complete and

current.

o Maintain tenant documentation (architecture, SOPs, KBs) and audit evidence;

review monthly metrics (incidents, MTTR, change success, Secure Score deltas) and

action as needed

o Reviews operational and security metrics (e.g., incident trends, MTTR, Secure Score

movement) and drive corrective actions
• Technical Liaison & Escalation: Serve as the technical point of contact for Tier 2/3 support

incidents, requests, problem management trends, and project-based engineering, while

tracking SLAs and monthly metrics.

o Serve as technical escalation for complex issues beyond user-level scope;

coordinate platform-level fixes and improvements
• Resident Rights:

o Knows Resident Rights

o Help the residents/patients exercise and/or protect their rights

o Reports resident/patient complaints to management

o Maintains confidentiality of resident/patient information
• HIPAA:

o Follows and adheres to Facility's policies and procedures implementing HIPAA

requirements for the privacy and security of protected health information

o Uses and/or discloses only minimum amount of Protected Health Information

necessary to complete assigned tasks

o Reports all suspected of violation of company's HIPAA policies or procedures to

Work Environment & Physical Demands

The responsibilities of this position involve typical office setting physical activities includingstanding, walking, sitting and lifting (up to 10 pounds unassisted). While performing the duties of this job, the employee is regularly required to talk and hear.

Required Education and Experience
• 5 to 7+ years of Cloud and/or M365 administration with demonstrated ownership ofplatform standards, security posture, and change decisions.

Preferred Education and Experience
• Associate's or Bachelor's in IT or related field (or equivalent experience)
• Microsoft 365 certifications (e.g., Enterprise Administrator Expert, Security Administrator,MD-102) or equivalent; Security+
• Healthcare IT experience a strong plus• Experience with HIPAA-compliant environments
• PowerShell automation, API integrations, and experience with Secure Score and CISassessments.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.