Associate System Administrator

Metro Group is seeking a driven Associate System Administrator with strong IT fundamentals across systems, cloud, networking, and security. This role is ON SITE in our Long Island City office, five days per week.

This role is built for someone ready to take real, broad ownership—working alongside the System Administrator to plan and execute infrastructure projects end-to-end, serve as the senior technical resource for the Help Desk, and lead technical integrations as Metro Group continues to grow. The right candidate is a systems thinker who is proactive, adaptable, and on a clear trajectory to grow into a full System Administrator.

• Administer Windows Server environments:
  Active Directory, Group Policy, DNS, DHCP, file/print services, and user/group account management.
• Manage Microsoft 365 services (Exchange Online, Teams, SharePoint, Intune, licensing) and cloud VMs: provisioning, resizing, snapshotting, and lifecycle management.
• Enforce security baselines via GPO, Conditional Access, MFA, SSO, and EDR/antivirus platforms (e.g., Bit Defender Gravity Zone, Manage Engine Endpoint Central).
• Perform routine server maintenance: OS patching, health monitoring, event log review, and capacity planning.
• Assist with hardware/software procurement and vendor relationships.

• Design, deploy, and manage backup solutions for on-prem servers, cloud VMs, and M365 data; configure retention tiers to meet RPO/RTO objectives; conduct restore tests and maintain DR SOPs.
• Onboard acquired companies onto Metro Group's backup platform and remediate gaps immediately.

• Administer LAN/WAN infrastructure: managed switches, VLANs, wireless APs, and firewall rules; troubleshoot complex connectivity issues across all locations.
• Manage endpoint security and device compliance; support MFA enforcement, privileged access management, identity governance, and security incident response.

• Serve as the technical escalation point for the Help Desk team; troubleshoot advanced Windows OS, application, VPN, and workstation issues for onsite and remote employees.
• Own end-to-end onboarding and offboarding: hardware imaging, account provisioning/deprovisioning, and workflow SOPs.

• Develop and maintain scripts to automate provisioning, compliance checks, and repetitive tasks; document all scripts with version history and usage notes.

A core function of this role is executing the technical integrations. The Associate System Administrator will own or co-own each workstream—coordinating with leadership, vendors, and incoming-company staff to deliver complete, secure, and well-documented integrations.

• Plan and execute mailbox migrations into Metro Group's M365 tenant; manage domain onboarding (MX, SPF, DKIM, DMARC), migrate shared mailboxes and distribution lists, reconfigure client's post-cutover, and decommission legacy mail infrastructure.

• Inventory and migrate file servers, NAS, and cloud storage into Metro Group's cloud infrastructure; apply governance and permission standards, remediate permissions post-migration, and validate integrity before decommissioning source systems.

• Manage number porting (LOAs, port orders, DID/extension mapping); provision of extensions and desk phones; configure auto-attendants and call routing; execute cutovers with a rollback plan and test all call paths post-port.

• Assess new office infrastructure and implement site-to-site VPN/IPSec to Metro Group's cloud; configure firewall rules, NAT, routing, and VLAN segmentation; replace incompatible hardware; document final topology.

• Conduct a security assessment at integration start; enroll all endpoints into EDR/endpoint management; enforce MFA and least-privilege access; apply OS/app patches before granting full network access; produce a post-integration sign-off checklist.

• 3–7+ years of IT experience spanning help…