IT Systems Administrator

Position Summary

Position Summary:

The Systems Administrator administers and supports Empyreal Logistics' hybrid, cloud-first infrastructure, including cloud, virtual, server, network, load balancing, and security systems. Working with the Senior Systems Administrator and the IT Security Analyst, the role handles day-to-day administration of identity and access, cloud productivity platforms, public cloud resources, endpoints and mobile devices, security tools, vulnerability scanning and patching, systems monitoring, and IT service requests.

The role resolves system-level issues, escalates complex problems, keeps systems secure and audit-ready, and automates routine tasks. It requires strong relationships with management and staff, solid troubleshooting and documentation skills, and a focus on reliable, high-quality service to internal users and clients.

Major responsibilities are as follows:

• Administer user, group, and guest accounts in the cloud identity provider following least-privilege standards.
• Support multi-factor authentication (MFA), self-service password reset, and conditional access policies; troubleshoot sign-in and access issues.
• Configure single sign-on (SAML/OIDC) and SCIM provisioning for SaaS applications under the direction of senior staff.
• Execute joiner/mover/leaver processes, including timely access removal at separation and the company's post-separation account retention schedule, with Legal Hold exceptions.
• Assist with periodic access reviews and gather audit evidence.

• Administer the cloud email, file storage, document collaboration, and team messaging platforms: mailboxes, shared resources, distribution lists, sharing settings, and user support.
• Assign and reclaim licenses.
• Monitor vendor service health and communicate user-impacting issues.

• Apply retention policies and sensitivity labels as defined by senior staff.
• Assist with eDiscovery and Legal Hold requests from Legal and HR, following documented chain-of-custody procedures.
• Run audit log searches in support of investigations and compliance reviews.

• Deploy and maintain cloud virtual machines, storage, and networking using approved standards and templates.
• Monitor cloud backup jobs and perform test restores on a scheduled basis.
• Track certificate and secret expirations and complete renewals.
• Report cloud resource usage and cost anomalies to senior staff.

• Enroll, provision, and manage company computers and mobile devices through unified endpoint management (UEM/MDM) platforms.
• Deploy applications and configuration profiles; maintain device compliance and full-disk encryption.
• Perform remote lock/wipe for lost, stolen, or retired devices.
• Set up, configure, and troubleshoot Windows and macOS workstations, laptops, mobile devices, and peripherals.

• Administer endpoint protection (EDR) for workstations and servers: deploy agents, apply policies, and triage and remediate alerts.
• Maintain firewall rules, VPN access, and web filtering according to approved change requests.
• Review identity threat detection and response (ITDR) and AI security control alerts and remediate or upscale findings.
• Onboard log sources to the SIEM and triage alerts with the IT Security Analyst.
• Administer the email security platform: quarantine review and release, allow/block lists, and phishing report handling.
• Perform daily information security checks and document results.
• Support the IT Security Analyst during incident response by collecting evidence and implementing containment steps.

• Run and schedule vulnerability scans; review findings and remediate assigned vulnerabilities within defined SLAs.
• Manage OS and third-part application patching on Windows, macOS, and Linux through the automated patch management platform; resolve failed deployments.
• Verify remediation through rescanning and record evidence for SOC 2 audits.

• Provision and deprovision users on the enterprise AI platform and manage seat assignments.
• Support staff with approved AI tools and elevate data-handling or policy questions.

• Respond to alerts from the infrastructure monitoring platform; deploy monitoring agents and maintain dashboards.
• Work…