Senior Systems Administrator

About Ampirical

At Ampirical, we're shaping the future of the power grid with precision, innovation, and purpose. Just as the ampere is the foundation of electric current, Ampirical is a core force driving the energy sector forward. We focus on quality, forward-thinking solutions, and empowering our team to grow and thrive.

We don’t just build projects—we build careers. If you’re looking for a place where your contributions matter and your professional development is supported every step of the way, we’d love to meet you. Watch this video to get a glimpse into our culture.

Salary Range
: $86,000
- Commensurate (dependent on experience, education, and qualifications)
Profit-Sharing Bonus
:
Semi-annual, performance-based (10% to 20% of salary)
Day-One Benefits
:
Medical, Dental, Vision
401(k) with 4% match and immediate vesting
PTO
:
Starting at 80 hours of vacation & 40 hours of sick time per year + 10 paid holidays
Flexible Work Schedule
:
Every other Friday off
Career Development
:
Advancement opportunities, tuition reimbursement
Perks
:
Gym membership stipend, wellness program, fertility benefits, pet insurance, and more

The System Administrator III is a senior technical contributor with deep expertise in Microsoft 365 and Azure cloud infrastructure. This role assists with the design, optimization, and security of Ampirical's cloud and hybrid environments, serving as the internal subject matter expert for the Microsoft ecosystem. The Sr. Systems Admin operates autonomously, leads cross-functional cloud initiatives, drives automation, and mentors junior administrators across the IT team.

• SME for the Microsoft 365 tenant, including Exchange Online, SharePoint Online, Teams, One Drive, and Purview

• Design and enforce M365 governance policies covering data retention, DLP, sensitivity labels, and information barriers

• Manage and optimize Microsoft 365 licensing, including E3/E5 assignment, license reconciliation, and cost governance

• Oversee Microsoft Intune MDM/MAM policies for corporate and BYOD device management

• Manage Power Platform governance (Power Apps, Power Automate) in alignment with IT policy

• Architect and maintain Entra  (Azure AD) including hybrid identity with on-premises Active Directory sync via Entra Connect

• Design and manage Conditional Access policies, MFA enforcement, and phishing-resistant authentication (FIDO2/passkeys)

• Administer Entra  Identity Management (PIM) for just-in-time privileged access

• Manage enterprise application registrations, OAuth consent policies, and service principal governance

• Lead user lifecycle automation including provisioning, de-provisioning, and dynamic group management

• Oversee B2B guest access governance and external collaboration controls

• Design, deploy, and maintain Azure infrastructure including virtual machines, virtual networks, storage accounts, and resource groups

• Manage Azure AD Connect, DNS, and hybrid networking between on-premises and Azure environments

• Implement and maintain Azure-based backup and disaster recovery solutions (Azure Site Recovery, Azure Backup)

• Monitor Azure resource health, cost management, and capacity planning using Azure Monitor and Cost Management tools

• Administer Azure Virtual Desktop (AVD) or equivalent remote access infrastructure where applicable

• Ensure Azure environment adherence to security baselines, policy assignments, and compliance frameworks

• Lead implementation and ongoing management of Microsoft security tooling across the M365 and Azure stack

• Conduct access reviews, permission audits, and Entra
  -in log analysis for anomalous activity

• Collaborate with the IT Security team on vulnerability remediation, endpoint compliance, and security incident response

• Support internal and external audits with documentation of cloud controls and configurations

• Administer and maintain on-premises Windows Server environments (Active Directory, DNS, DHCP, Group Policy, Hyper‑V)

• Assist with OS patching, server health monitoring, and change management…