Systems Administrator

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Regular Full-Time Technical Memphis, Memphis, TN, US

Salary Range: $70,000.00 To $90,000.00 Annually

The Systems Administrator supports BPI's IT environment for 440-500 users across 14 locations, working under the direction of the IT Director. The role combines first and second-level help desk support with hands-on systems work: device management in Microsoft Intune and Entra , plus server, backup, and network support.

This is a hands-on role for someone who wants to learn and grow. You will start with core support and device management, and take on more of the systems work, including automation, projects, and infrastructure, as your skills develop. We provide training, and we welcome experienced candidates as well as motivated earlier-career candidates with strong fundamentals.

• Support Microsoft Entra , groups, device join and registration, and Conditional Access policies, and assist with admin role management.
• Support the company MFA program, including enrollment and troubleshooting for phishing-resistant methods (FIDO2 passkeys, Windows Hello for Business, and Platform SSO on macOS).
• Support on-premises Active Directory and Group Policy, and assist with hybrid identity between Active Directory and Entra .
• Assist with the internal PKI and certificate deployment to managed devices.
• Support endpoint security, including Bit Locker, endpoint compliance and web filtering, and security baselines.
• Support Microsoft Intune for Windows, macOS, iOS, and Android: enrollment, configuration profiles, compliance policies, update rings, and security baselines.
• Maintain Windows Autopilot deployments, and provision new and replacement devices so they are ready on day one.
• Package, deploy, and patch applications (Win
  32, line-of-business, Store, and third-party) through Intune.
• Support Android Enterprise dedicated devices, including the warehouse scanner fleet (140+ devices), OEMConfig, and Managed Home Screen.
• Support iOS devices for drivers and field staff, including VPN configuration profiles.
• Track hardware inventory and lifecycle, and help plan device refresh cycles using Intune reporting.
• Pilot-test configurations, images, and policies before production rollout, following change management practices.

• Provide first and second-level support for help desk tickets, resolving common issues with hardware, software, phones, and network connectivity.
• Create, manage, and resolve tickets in Zendesk, and document solutions in the knowledge base.
• Escalate complex issues to the IT Director or Network Admin as needed.
• Use Pulseway RMM to monitor, patch, and support servers and endpoints.
• Take part in an on-call rotation for after-hours emergencies.

• Assist the Network Admin with Fortinet firewalls and the remote-access VPN, including monitoring, troubleshooting, and scheduled maintenance.
• Support Uni Fi wireless networks across all locations in partnership with the Network Admin.
• Support Windows Server and Hyper-V hosts: patching, monitoring, and routine maintenance.
• Support Datto backups: verify jobs, perform restores, and help maintain disaster recovery plans.

• Support Microsoft 365 and Exchange Online: mailboxes, permissions, shared and room resources, and licensing.
• Support the email security gateway and mail routing, including SPF, DKIM, and DMARC.
• Support conference room PCs, room accounts, and Microsoft Teams meeting spaces.

• Write and maintain Power Shell scripts to automate configuration, remediation, and routine…