System Administrator

please do not apply to this role if you do not live in either the pacific (pst) or moutain (mst) time zone. If you do not live in one of these time zones, your application will be rejected.

about the role

clearone advantage is a fully remote debt settlement company that helps consumers resolve unsecured debt. We operate in a regulated environment and maintain pci dss and soc 2 compliance, so security and sound process are built into how it works. Our proprietary software is tailored to our industry, and we keep improving our technology so our employees can do their best work and our clients get excellent service.

we are seeking a systems administrator to own the day-to-day administration of our identity, endpoint, cloud, and business application environment. You will work helpdesk tickets directly and serve as the escalation point for associate systems administrators. You will also lead onboarding and offboarding at scale and contribute to automation, security, and documentation improvements across it

identity, access, and microsoft 365

• administer active directory and entra , including ou structure, group policy, security groups, and hybrid sync.
• own microsoft 365 administration: licensing, exchange online mailboxes and mail flow, teams, sharepoint, and conditional access and mfa policies.
• design, automate, and maintain onboarding and offboarding workflows, including scim-based automated provisioning and deprovisioning from entra  business applications, bulk provisioning of new agent classes, and same-day deprovisioning of departing staff.
• administer access for business applications including salesforce, docusign, github, nice incontact (cxone), and ai tools such as claude, chatgpt, and microsoft copilot, including seat assignment and licensing.
• run periodic access reviews, enforce least privilege, and approve or upgrade access requests.
• manage ip whitelisting for internal use and for external partners

endpoint management

• administer microsoft intune and desktop central (manageengine endpoint central) for device enrollment, compliance policies, software deployment, and patching.
• build and maintain standard workstation images and autopilot or zero-touch deployment processes for windows and macos.
• own patch compliance reporting and remediation across the endpoint fleet.
• oversee hardware lifecycle, inventory accuracy, shipping, and redeployment, with associate systems administrators handling day-to-day fulfillment.
• administer and support corporate vpn and remote access, and help with the migration from vpn to zero trust network access (ztna).

infrastructure and cloud

• create and maintain aws work spaces and support related aws resources, including whitelisting ips in the appropriate security groups.
• maintain backups, verify restores, and participate in disaster recovery planning and testing.
• support network and firewall changes in partnership with networking resources, including vlans, dns, dhcp, and vpn configuration.
• partner with minor devops responsibilities, such as github repository and access management, and maintaining cloud resources alongside the devops team.

business applications and contact center

• serve as administrator and escalation point for incontact (cxone), teramind, tableau, ftp and secure file transfer.
• coordinate with vendors on application issues, upgrades, and renewals.
• maintain the application and license inventory and drive license optimization.

security, compliance, and audits

• administer endpoint security and monitoring tools and respond to security alerts in coordination with it leadership.
• review and implement security recommendations from microsoft defender, tracking remediation of vulnerabilities and…