IT Systems Engineer

You own the identity, collaboration, and endpoint platforms every employee depends on:
Active Directory and Entra , Microsoft 365 and Google Workspace, SSO for our SaaS stack, and device management across Windows and macOS. You script the repetitive work and document what you build.

Responsibilities:

• Administer Active Directory and Entra  lifecycle, groups, GPO, DNS, Entra Connect and hybrid sync health, Conditional Access, privileged-role and stale-account hygiene
• Administer Microsoft 365 (Exchange, Teams, licensing) and Google Workspace (org units, groups, Drive governance, Entra-federated auth, multi-domain coexistence)
• Own SSO onboarding and maintenance for SaaS applications in Entra (SAML/OIDC, SCIM where supported)
• Endpoint management:
  Intune for Windows and Jamf for macOS, covering enrollment, compliance policy, patching, app deployment, and configuration baselines, in partnership with the desktop support team
• Administer Mimecast and Webex Control Hub
• Use scripting to make IT operations faster and more consistent:
  Power Shell and Graph for bulk user and license changes, group cleanup, reporting on stale accounts and device compliance, and Intune/Jamf deployment scripts. Look for the repetitive manual task and script it away
• Own certificate renewals, service accounts, and backup verification for identity and SaaS data
• Hands-on presence for the KC HQ: server room and network closet work, hardware receiving and staging, and onsite backup for AV and conference systems when the desktop team needs it
• Maintain runbooks in the IT Confluence space
• Tier 2 escalation for identity, licensing, collaboration, and endpoint tickets

Qualities:

• 4+ years in a Windows/Entra environment of 500+ users: AD (GPO, DNS, replication troubleshooting), Entra Connect, Conditional Access
• Hands-on Intune and Jamf administration
• 2+ years administering Google Workspace, ideally alongside M365
• Comfortable in Power Shell: you write your own scripts for day-to-day admin work (bulk changes, reporting, Intune remediations) and can read and adapt Graph API calls
• SSO configuration and troubleshooting (Entra enterprise apps)
• Networking literacy (DNS, DHCP, VLANs, VPN)
• Documents without being asked
• Plus:
  Jira/Confluence administration, Mimecast, agency or professional-services background

• At BarkleyOKRP, DEI+B drives work that matters. We believe people and creativity are made of the same substance, and when every perspective is valued, the impact is stronger. We build belonging as a business strategy, power inclusive creativity that delivers measurable results, and hold ourselves accountable as a B Corp committed to progress over performative intent. When people are valued, the work carries greater impact.