Systems Administrator​/Cloud Ops

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

IT Full Time Bozeman, MT, US

2 days ago Requisition

Salary Range: $70,000.00 To $ Annually

Reports to

Manager, Infrastructure & Cloud Operations

Team

Infrastructure & Cloud Operations - works alongside a senior systems engineer

Location

Flexible - any company office or remote (US), with travel to offices and data centers

Level

Individual contributor - analyst / engineer

Employment type

Full-time, exempt

This role keeps the identity, cloud services, servers, and networks our engineering, surveying, and design teams rely on secure and running.

Identity is the control plane for everything else. Access, security, acquisition integration and audit evidence all depend on one directory being authoritative. The company operates across six engineering firms and is consolidating them onto a single Microsoft 365 identity tenant.

This role works alongside the team’s senior systems engineer on identity, core cloud services and day-to-day infrastructure operations. You will own routine administration, patching, monitoring, backup and data center operations, and take an active part in the tenant consolidation and in operating the result. The company currently runs three data centers, which are being consolidated as part of that program.

You will also provide second-level support to the engineering, surveying and design staff who rely on these systems across offices and in the field, including the specialist applications their work depends on.

The role is also the team’s backup for identity and the network. You will cross-train with the senior engineer to the point where either of you can run the environment while the other is out - cover that is tested, not assumed.

• Perform routine administration across servers, virtualization (VMware or Hyper-V), cloud workloads, storage, backup and collaboration services, and execute the patch cycle across servers and cloud infrastructure with published currency reporting.
• Operate and maintain the company’s three data centers, and execute the data center consolidation program as it is sequenced.
• Monitor infrastructure health and capacity, respond to alerts, and elevate with useful diagnostic information rather than a restated alert. Take second-level escalation from the service desk on infrastructure issues.
• Execute and evidence backup restore tests on the published schedule, without prompting, and maintain the disaster recovery procedures they support.

• Support the consolidation of all operating companies into a single identity tenant, including mailbox, file and Teams migration.
• Administer Active Directory, Entra  hybrid identity, including Group Policy, DNS and DHCP.
• Run the identity lifecycle: joiner, mover and leaver processes that work reliably and produce an audit trail. A departed employee retaining access is a finding in every framework the company is subject to.
• Administer multi-factor authentication, conditional access and privileged access, including the documented, time-limited exception list.
• Maintain role and group design so that access is granted by role rather than by request history.

• Administer Microsoft 365 service configuration and health:
  Exchange Online, SharePoint Online, One Drive and Teams.
• Maintain tenant-level security and compliance configuration in partnership with the Manager, Information Security & Compliance, including data loss prevention, retention and audit logging.
• Support the identity and tenant design of a segmented compliance enclave for…