Systems Administrator

The System Administrator is responsible for administering and enhancing Evans’ cloud‑centric IT infrastructure, ensuring secure, resilient, and scalable operations across Microsoft Azure, Microsoft 365, SaaS platforms, and endpoint ecosystems.

This role expands on the foundation of the Junior System Administrator position by adding deeper expertise in automation, security governance, infrastructure design, and cross‑department technical leadership. Reports directly to the IT Manager
.

• Manage, optimize, and troubleshoot Microsoft Azure services (VMs, storage, networking, virtual appliances, PIM, resource groups).
• Oversee and improve cloud governance, cost management, security baselines, and resource tagging standards.
• Maintain and enhance Microsoft 365, SharePoint, Teams, and core SaaS platforms.
• Lead rollout of new cloud services, ensuring proper testing, validation, and documentation.

• Own Identity & Access Management (IAM) operations and design in Microsoft Entra .
• Maintain and enhance Conditional Access, MFA enforcement, and Zero Trust posture.
• Administer role‑based access controls (RBAC), PIM, privileged access policies, and access review cycles.
• Support vulnerability remediation efforts across SaaS, endpoints, and cloud systems.
• Lead the development and governance of Intune configuration profiles, compliance policies, device baselines, application deployments, and Auto Pilot.
• Monitor and enforce endpoint security compliance across the fleet.
• Design and implement remediation scripts and automated enforcement policies.

• Build and maintain automation using Power Shell, Python, Logic Apps, and API integrations.
• Reduce operational toil through automated provisioning, policy deployment, reporting, and lifecycle workflows.
• Mentor junior team members on scripting best practices.
• Serve as Tier 2 escalation for complex SaaS, identity, endpoint, and cloud issues.
• Collaborate with cross‑functional teams to ensure operational continuity during incidents.

• Maintain high‑quality documentation in Microsoft Loop for policies, SOPs, deployment guides, and architecture diagrams.
• Ensure all changes are logged in Fresh service with proper testing, rollback plans, and CAB review when needed.
• Conduct documentation and process reviews for junior staff.

• Bachelor’s degree in IT, Computer Science, or equivalent experience.
• 3–5 years in system administration, cloud administration, or advanced IT support.
• Strong expertise in Microsoft Azure and Entra .
• Proficiency in Microsoft Intune & device lifecycle management.
• Solid understanding of networking fundamentals (DNS, subnetting, VPN, firewalls).
• Proficient in Power Shell with working knowledge of Python.
• Strong troubleshooting skills with ability to resolve complex cross platform issues.
• Clear communicator skilled in documenting and explaining technical solutions.
• Experience designing and enforcing Zero Trust policies preferred
• Hands on experience with security tooling (EDR/XDR, SIEM, patching, vulnerability management) preferred
• Experience with API integrations and automation frameworks preferred
• Construction software expertise (Autodesk, Touch Plan, Bluebeam) preferred
• Experience with Vista Viewpoint preferred
• Microsoft Certified:
  Cybersecurity Architect (SC 100) preferred
• Azure Solutions Architect Expert (AZ 305) certification preferred
• Microsoft Certified:
  Identity & Access Administrator (SC 300) preferred
• CompTIA Security+ certification preferred
• ITIL Foundation v4 certification preferred

Evans General Contractors, LLC is an Equal Employment Opportunity Employer.