System Administrator

In this role, you will own the day‑to‑day health of our Azure infrastructure, Microsoft 365 E5 tenant, and Intune‑managed endpoint fleet. You’ll partner closely with Network Administration and Technical Services leadership to keep a distributed clinical workforce connected, secure, and productive. This is a hands‑on role for someone who moves fast, documents well, and takes pride in a well‑run environment. Brentwood, TN or Tempe, AZ | Remote Eligible | Full‑Time | Information Technology

Responsibilities

• Monitor, maintain, and continuously harden Monogram’s Azure environment, including Compute, Storage, Networking, and Security services.
• Automate scaling and capacity management using Azure-native tools and Power Shell scripting.
• Implement and manage new Azure environments and services as the organization grows.
• Administer Azure AD / Entra , including SSO configuration for enterprise applications, Conditional Access policies, and GPO management.
• Manage Windows Server and SQL database environments: provisioning, configuration, upgrades, migrations, and patching.
• Administer the full M365 E5 tenant including Exchange Online, Teams, SharePoint, One Drive, and the Microsoft Purview and Defender suite.
• Manage user lifecycle, licensing assignments, and role‑based access controls across the M365 platform.
• Configure and maintain Microsoft Defender for Endpoint, Identity, and Cloud Apps as part of the E5 security stack.
• Support and optimize Microsoft Sentinel alerting and SIEM integration in partnership with the Cybersecurity team.
• Administer Privileged Identity Management (PIM) for just‑in‑time, time‑bound role elevation, and support MFA / passwordless authentication initiatives.
• Manage MDM/MAM environment for Windows and mobile devices used by a distributed clinical workforce.
• Build and maintain device configuration profiles, compliance policies, and application deployment packages.
• Manage Autopilot provisioning for new device onboarding across remote and office‑based staff.
• Troubleshoot endpoint issues across CPU, memory, disk, and connectivity on Azure‑joined devices.
• Administer and troubleshoot Cisco Meraki network infrastructure including routing, switching, firewalls, and wireless.
• Support DNS, DHCP, SMTP, SNMP, SSH, SFTP, and TCP/IP in hybrid Azure and on‑premises environments.
• Manage VPN connectivity and client‑side troubleshooting for remote clinicians.
• Maintain and test backup, restore, and disaster recovery procedures for Azure workloads.
• Provide escalated Tier 2/3 support to end users and service desk technicians.
• Document infrastructure configurations, runbooks, and standard operating procedures.
• Participate in on‑call rotation with occasional evening and weekend availability for critical incidents.
• Work autonomously on projects while keeping stakeholders informed at key milestones.
• Support internal and external compliance audits by gathering evidence and documentation related to infrastructure controls.

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or a minimum of 4 years systems administration experience in a cloud‑first or hybrid environment. Previous background in healthcare IT or other regulated environments (HIPAA familiarity) preferred.
• Demonstrated expertise administering Microsoft Azure:
  Compute, Storage, Networking, Azure AD / Entra , and Security services.
• Advanced working knowledge of Microsoft Intune for endpoint and mobile device management.
• Proficient in Power Shell scripting for automation, reporting, and infrastructure management.
• Experience with Microsoft 365 administration at scale (Exchange Online, Teams, SharePoint, One Drive).
• Solid understanding of Active Directory, LDAP, DNS, DHCP, Kerberos, and Windows Authentication.
• Knowledge of TCP/IP, network routing and subnetting, and VPN technologies.
• Ability to troubleshoot Azure server and SQL database performance issues including CPU, memory, I/O, and disk.
• Experience managing Azure backup, recovery, and high‑availability strategies.
• Microsoft certifications: AZ-104 (Azure Administrator), MD-102 (Endpoint Administrator), MS-900, or equivalent preferred.
• Experience with Microsoft Defender for…