System Administrator

The System Administrator is responsible for administering and enhancing Evans’ cloud‑centric IT infrastructure, ensuring secure, resilient, and scalable operations across Microsoft Azure, Microsoft 365, SaaS platforms, and endpoint ecosystems.

This role expands on the foundation of the Junior System Administrator position by adding deeper expertise in automation, security governance, infrastructure design, and cross‑department technical leadership. Reports directly to the IT Manager
.

• Manage, optimize, and troubleshoot Microsoft Azure services (VMs, storage, networking, virtual appliances, PIM, resource groups).
• Oversee and improve cloud governance, cost management, security baselines, and resource tagging standards.
• Maintain and enhance Microsoft 365, SharePoint, Teams, and core SaaS platforms.
• Lead rollout of new cloud services, ensuring proper testing, validation, and documentation.

• Own Identity & Access Management (IAM) operations and design in Microsoft Entra .
• Maintain and enhance Conditional Access, MFA enforcement, and Zero Trust posture.
• Administer role‑based access controls (RBAC), PIM, privileged access policies, and access review cycles.
• Support vulnerability remediation efforts across SaaS, endpoints, and cloud systems.
• Lead the development and governance of Intune configuration profiles, compliance policies, device baselines, application deployments, and Auto Pilot.
• Monitor and enforce endpoint security compliance across the fleet.
• Design and implement remediation scripts and automated enforcement policies.

• Build and maintain automation using Power Shell, Python, Logic Apps, and API integrations.
• Reduce operational toil through automated provisioning, policy deployment, reporting, and lifecycle workflows.
• Mentor junior team members on scripting best practices.
• Serve as Tier 2 escalation for complex SaaS, identity, endpoint, and cloud issues.
• Collaborate with cross‑functional teams to ensure operational continuity during incidents.

• Maintain high‑quality documentation in Microsoft Loop for policies, SOPs, deployment guides, and architecture diagrams.
• Ensure all changes are logged in Fresh service with proper testing, rollback plans, and CAB review when needed.
• Conduct documentation and process reviews for junior staff.

Evans General Contractors, LLC is an Equal Employment Opportunity Employer, including disability and protected veteran status.

• Bachelor’s degree in IT, Computer Science, or equivalent experience.
• Strong expertise in Microsoft Azure and Entra .
• Solid understanding of networking fundamentals (DNS, subnetting, VPN, firewalls).
• Strong troubleshooting skills with ability to resolve complex cross platform issues.
• Experience designing and enforcing Zero Trust policies preferred.
• Experience with API integrations and automation frameworks preferred.
• Experience with Vista Viewpoint preferred.
• Microsoft Certified:
  Cybersecurity Architect (SC 100) preferred.
• Microsoft Certified:
  Identity & Access Administrator (SC 300) preferred.
• ITIL Foundation v4 certification preferred.
• 3–5 years in system administration, cloud administration, or advanced IT support.
• Proficiency in Microsoft Intune & device lifecycle management.
• Proficient in Power Shell with working knowledge of Python.
• Clear communicator skilled in documenting and explaining technical solutions.
• Hands on experience with security tooling (EDR/XDR, SIEM, patching, vulnerability management) preferred.
• Construction software expertise (Autodesk, Touch Plan, Bluebeam) preferred.
• Azure Solutions Architect Expert (AZ 305) certification preferred.
• CompTIA Security+ certification preferred.