System Administrator

RGBSI is a global engineering services company with nearly three decades of experience delivering solutions across mechanical design, simulation, embedded electronics, manufacturing, and regulatory compliance. We support customers in automotive, aerospace and defense, and industrial markets, and our staffing division, Zobility, places technical talent at leading enterprises worldwide.

We are seeking a hands-on System Administrator to own and operate RGBSI’s core IT infrastructure and end-user computing environment from our Troy, MI headquarters. This is a hybrid role spanning traditional sysadmin work (Active Directory, Windows Server, network) with cloud identity and endpoint management (Azure, Microsoft 365, Intune), plus day-to-day IT generalist responsibilities including helpdesk, onboarding/offboarding, and endpoint support.

The ideal candidate brings a strong learning mindset and excellent communication skills. They are technically deep across hybrid AD/M365 environments, methodical about security and documentation, and equally comfortable troubleshooting a user s laptop as they are reviewing firewall rules or designing an Intune compliance policy.

• Identity, Directory & Cloud Administration
  • Administer hybrid Active Directory environment, including on-prem AD DS, Azure AD / Entra , and Azure AD Connect synchronization.
  • Manage Microsoft 365 tenant:
    Exchange Online, SharePoint Online, One Drive, Teams, and licensing.
  • Implement and maintain Conditional Access, MFA, SSO, and identity governance policies.
  • Manage group policy (GPO) and equivalent Intune configuration profiles for a hybrid-joined estate.
  • Execute employee onboarding and offboarding using documented runbooks and Power Shell automation.
  • Own Microsoft Intune for Windows and mobile device management, including compliance policies, configuration profiles, app deployment, and Autopilot provisioning.
  • Maintain endpoint security baselines, patching, and Defender for Endpoint configuration.
  • Manage software packaging, deployment, and license tracking across the fleet.
• Server & Infrastructure Administration
  • Administer on-prem Windows Server infrastructure: domain controllers, file servers, print services, DHCP, DNS, and backup systems (Veeam).
  • Maintain virtualization platforms (Hyper-V) and storage infrastructure.
  • Plan and execute patching, upgrades, and capacity changes with appropriate change control.
  • Own backup, recovery, and business continuity testing for critical systems.
• Network & Security
  • Administer firewalls (Cisco Meraki), site-to-site and client VPN, switches, and Wi-Fi infrastructure across RGBSI sites.
  • Monitor network performance, capacity, and security events; respond to incidents and tune controls.
  • Implement and maintain network segmentation, ACLs, and remote access policies.
  • Coordinate with security and compliance stakeholders on audits, vulnerability remediation, and policy enforcement.
  • Serve as escalation point for Tier 2/3 helpdesk tickets across hardware, software, identity, and connectivity issues.
  • Provide hands-on support to onsite Troy staff and remote support to other RGBSI offices.
  • Maintain documentation, knowledge base articles, and standard operating procedures.
  • Support conference room AV, printers, and shared office technology.
  • Automate routine administration using Power Shell, Microsoft Graph, and Intune scripting.
  • Identify opportunities to reduce manual work, improve security posture, and standardize configurations.
  • Maintain accurate asset inventory, license records, and infrastructure documentation.

• 5+ years of progressive system administration experience in a Windows-centric enterprise environment.
• Active, daily use of AI tools and technologies (e.g., Microsoft Copilot, Claude, ChatGPT, and similar assistants) is required. The successful candidate is expected to leverage AI to accelerate troubleshooting, scripting, documentation, and routine administration, and to stay current as the tooling evolves.
• Hands-on working knowledge of enterprise cybersecurity tooling, including Crowd Strike (endpoint detection & response), Zscaler (secure web gateway / ZTNA), and Mimecast (email…