Systems Administrator

Description

Systems Administrator

Reports To: Head of IT Engineering |
Location: Indianapolis, IN |
Work Arrangement: Full-time, hybrid

Compensation: See details below

The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands‑on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment.

• Administer Microsoft 365 and Microsoft Entra s multiple tenants, including identities, permissions, privileged access, and secure authentication.
• Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk‑based access, and session controls; use report‑only mode and pilot groups to reduce disruption.
• Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.
• Govern SharePoint Online and One Drive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.
• Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.
• Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data‑protection risks before rollout.
• Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.
• Use Power Shell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.
• Investigate suspicious sign‑ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.
• Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.
• Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.
• Participate in technology initiatives, migrations, and service improvements, following change‑management practices and communicating impacts to stakeholders.

• 5+ years of systems or cloud administration experience, including 3+ years of hands‑on Microsoft 365 administration in production environments.
• Demonstrated depth in Entra  Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
• Strong Power Shell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
• Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
• Strong documentation, collaboration, communication, prioritization, and change‑management skills.

• Experience with Microsoft 365 Copilot administration, readiness, or governance.
• Multi‑tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.
• Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.
• Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.
• Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.
• Bachelor’s degree in a technology‑related field or an equivalent combination of education, certifications, and relevant professional experience.