Systems Administrator

• Azure Storage, Azure Files and Azure File Sync, Azure Blob Storage

Suveto is a dynamic and growing veterinary organization dedicated to supporting our hospitals and teams with innovative strategies.

This is a hybrid position, must be a commutable distance from our office in Conshohocken, PA.

We are seeking an experienced and skilled Systems Administrator to join our growing IT team. The Systems Administrator owns the day-to-day administration, engineering, and automation of the Company's Microsoft platform estate – Windows Server, Microsoft Azure infrastructure and platform services, Microsoft 365, Microsoft Entra , and Microsoft Intune. This is a hands‑on senior individual contributor role for someone who has already run production Microsoft workloads and is ready to own systems end to end rather than execute tickets.

Working independently with general supervision, the Systems Administrator designs and implements system changes, builds automation in Power Shell and infrastructure as code, administers identity and endpoint management, maintains monitoring and alerting through Azure Monitor, and supports the security and compliance posture of the estate through Microsoft Defender and Microsoft Purview. The role is expected to reduce manual operational work over time — the measure of success is not how many tasks are completed but how many stop needing to be done by hand.

• Microsoft Entra  (formerly Azure Active Directory) — users, groups, enterprise applications, app registrations, Conditional Access, Multi‑Factor Authentication
• Microsoft Entra  and Privileged Identity Management (PIM) — access reviews, just‑in‑time role elevation
• Microsoft Entra Connect and Microsoft Entra Cloud Sync — hybrid directory synchronization
• Microsoft Entra  — risk‑based sign‑in and user risk policies
• Windows Server Active Directory Domain Services (AD DS), Group Policy, AD FS where still in use

• Azure Virtual Machines, Azure Virtual Network, Network Security Groups, Azure Bastion, Azure Load Balancer, Azure Firewall
• Azure Storage, Azure Files and Azure File Sync, Azure Blob Storage
• Azure App Service, Azure Functions, Azure Key Vault
• Azure Backup, Azure Site Recovery, Azure Update Manager
• Azure Arc — extending Azure management to on‑premises and non‑Azure servers
• Azure Local (formerly Azure Stack HCI) and Azure Virtual Desktop where deployed
• Azure Policy, Azure Resource Manager, management groups and subscription governance

• Exchange Online, SharePoint Online, Microsoft Teams, One Drive for Business
• Microsoft 365 Apps for enterprise;
  Microsoft 365 admin center
• Microsoft Intune — compliance policies, configuration profiles, Windows Autopilot, application deployment, Endpoint Privilege Management
• Windows 11 Enterprise servicing and update rings

• Microsoft Defender XDR — Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud
• Microsoft Defender Vulnerability Management;
  Microsoft Security Exposure Management
• Microsoft Purview — data loss prevention, retention, sensitivity labels, audit, eDiscovery
• Microsoft Sentinel (formerly Azure Sentinel) — SIEM analytics rules and incident triage
• Azure Monitor, Log Analytics work spaces, Kusto Query Language (KQL), Workbooks, Azure Monitor Agent, Application Insights

• Power Shell 7, Microsoft Graph Power Shell SDK, Exchange Online Power Shell (note: Azure AD Power Shell and MSOnline are deprecated — Graph is the forward path)
• Infrastructure as code — Bicep, ARM templates, or Terraform
• Azure Automation runbooks, Azure Logic Apps, Windows Task Scheduler for legacy on‑premises jobs
• Git and Azure Dev…