Systems Administrator
Reports To: Head of IT Engineering | Location: Indianapolis, IN | Work Arrangement: Full-time, hybrid
Compensation: See details below
ROLE SUMMARY
The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands-on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment.
ESSENTIAL DUTIES AND RESPONSIBILITIES
• Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.
• Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk-based access, and session controls; use report-only mode and pilot groups to reduce disruption.
• Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.
• Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.
• Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.
• Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data-protection risks before rollout.
• Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.
• Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.
• Investigate suspicious sign-ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.
• Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.
• Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.
• Participate in technology initiatives, migrations, and service improvements, following change-management practices and communicating impacts to stakeholders.
REQUIRED QUALIFICATIONS
• 5+ years of systems or cloud administration experience, including 3+ years of hands-on Microsoft 365 administration in production environments.
• Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
• Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
• Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
• Strong documentation, collaboration, communication, prioritization, and change-management skills.
PREFERRED QUALIFICATIONS
• Experience with Microsoft 365 Copilot administration, readiness, or governance.
• Multi-tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.
• Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.
• Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.
• Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.
• Bachelor's degree in a technology-related field or an equivalent combination of education, certifications, and relevant professional experience.
Salary Description
$80,000 - $100,000
