Cloud Systems Administrator

The Cloud Systems Administrator is responsible for the day-to-day administration of the organization's Microsoft cloud environment, including Azure, Microsoft 365, Intune, and NinjaRMM. Reporting to the Director of Information Technology, this role works closely with the Cloud Cybersecurity Engineer on security alignment and serves as the primary internal point of contact for the MSP providing Help Desk and NOC support.

• Manage day-to-day Azure resources including VMs, virtual networks, storage accounts, and resource groups.
• Administer Entra  hybrid identity sync, RBAC, Privileged Identity Management, and Conditional Access in partnership with the Cybersecurity Engineer.
• Monitor environmental health using Azure Monitor and Log Analytics; elevate security anomalies to the Cybersecurity Engineer.
• Administer Exchange Online, SharePoint, Teams, One Drive, and full M365 user and license lifecycle.
• Configure M365 tenant settings as directed by the Cybersecurity Engineer, including integrations with Abnormal AI and Defender for Office 365.
• Monitor M365 service health and communicate impactful changes to the MSP and business stakeholders.
• Own Intune policy configuration including compliance policies, configuration profiles, Endpoint Security, and App Protection Policies.
• Manage Windows Autopilot and Apple Business Manager for device enrollment and zero-touch provisioning.
• Ensure all managed endpoints maintain active Sentinel One agent coverage.
• Maintain NinjaRMM for endpoint monitoring, remote management, and scripted task execution in coordination with the MSP.
• Own the patch lifecycle for Windows, macOS, and mobile endpoints using Intune and Windows Update for Business.
• Maintain deployment rings (test pilot production) aligned to Patch Tuesday cadence.
• Coordinate patch prioritization with the Cybersecurity Engineer and communicate upcoming rollouts to the MSP Help Desk
• Document changes to Intune policies, Azure configurations, and patch rings with sufficient detail to support rollback or handoff.
• Triage Sentinel One alerts and elevate active threats to the MDR service.
• Review and action high-priority Abnormal AI email quarantine decisions.
• Apply emergency Conditional Access changes in Entra  required.
• Serve as the internal contact for the NOC on security escalations.
• Other duties as assigned

• Endpoint Management
  - Maintains fully patched, compliant, and consistently enrolled endpoints across the environment.
• Process Improvement
  - Actively identifies opportunities to reduce manual work, streamline workflows, and strengthen collaboration with the MSP.
• Judgment & Escalation
  - Demonstrates sound judgment in knowing when to take independent action and when to expand issues appropriately.
• EDR Expertise
  - Familiar with modern EDR platforms such as Sentinel One and capable of supporting endpoint security operations.
• Automation Skills
  - Power Shell scripting experience for M365 and Intune automation is a strong plus.
• Cross-Team Collaboration
  - Builds and maintains positive, service-oriented relationships with employees across all departments.

• Education and Training:
  Bachelor's degree in IT or a related field, or equivalent hands‑on experience or as deemed sufficient by management
• Technical Requirements:
  Working knowledge of Azure, Entra , and Microsoft 365 administration. Familiarity with NinjaRMM or a comparable RMM platform. Basic familiarity with EDR platforms. Sound experience with compliance policies, configuration profiles, Autopilot, and app deployment.
• Experience:
  
  At least 3 to 5 years of hands‑on experience administering Microsoft cloud environments in a production setting, or as deemed sufficient by management

The above information on this description has been…