Systems Administrator

Rockwater Group is a management company that provides Finance, Human Resources, Technology, Marketing, and other shared services to Rockwater Tax, our technology-enabled professional services business delivering tax and accounting services, and Tax Rock, our technology business that provides innovative solutions that modernize how tax services are delivered.

Together, our businesses combine deep industry expertise with technology to create better, more efficient ways to serve our customers.

Rockwater Group is looking for a hands-on Systems Administrator who isn't afraid to dig in! You'll keep our technology humming day to day:
Microsoft 365 and Azure, identity and access, laptops and networks, security tools, and the business systems our teams live in. You'll report directly to our VP of Technology.

We're building out IT from the ground up and want someone who brings curiosity, follow-through, and a “let me take a look” attitude. You know the person who hears “the printer's acting weird” and is already behind it with a flashlight before anyone finishes the sentence? That's who we're looking for.

Most of our team works in the office, so you'll be the go-to tech person down the hall, while also supporting a smaller group of remote teammates across the country.

Because we handle taxpayer data, security isn't a side project here. It's part of the job. This is a great next step for a systems administrator, MSP engineer, or senior IT support specialist who's ready to own an environment, not just a ticket queue. As we grow, this role can grow with you, with a clear path toward a senior systems or IT operations position.

• Administer our Microsoft 365, Entra , Intune, Exchange Online, and Azure environment, including configuration standards, licensing, and tenant security.
• Manage identity and access: SSO, MFA, conditional access, provisioning, and the full account lifecycle from onboarding to offboarding.
• Own endpoints from procurement to retirement, including imaging and Autopilot, Windows Update and patch policy, endpoint protection, and RMM coverage on every corporate device.
• Enforce our security policies, manage email security filtering, and support vulnerability assessments, outside penetration testing, incident response, and disaster recovery planning.
• Administer our business systems, including Salesforce, Hub Spot, Box, Quick Books Online, document management, and our tax and financial software, managing access, integrations, and license optimization.
• Be the first call (and the friendly face) for IT questions, running a consistent help desk with clear SLAs for tickets, onboarding, and deprovisioning.
• Manage the network, managed switches, and on-site equipment in Carlsbad, as well as our cloud telephony platform.
• Maintain the approved-tool list and acceptable-use standards for AI and other third-party software, including what firm and client data may be entered into outside systems.
• Build an internal knowledge base so the same question never has to be answered twice, and help deliver security awareness training for all employees.
• Partner with the VP of Technology on technology planning, vendor evaluation, and new implementations.

• Complete a Microsoft 365 tenant audit and a full device and license inventory.
• Review our security and RMM platforms, and use Intune to find where software deployment has drifted.
• Review Windows Update and patch management policies and bring them to standard.
• Get endpoint protection and RMM agents deployed consistently across every corporate device, so we know exactly what we own and what…