Systems Administrator

Reports To: Head of IT Engineering | Location: Indianapolis, IN | Work Arrangement: Full-time, hybrid

Compensation: See details below

ROLE SUMMARY

The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands-on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment.

ESSENTIAL DUTIES AND RESPONSIBILITIES

· Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.

· Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk-based access, and session controls; use report-only mode and pilot groups to reduce disruption.

· Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.

· Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.

· Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.

· Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data-protection risks before rollout.

· Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.

· Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.

· Investigate suspicious sign-ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.

· Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.

· Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.

· Participate in technology initiatives, migrations, and service improvements, following change-management practices and communicating impacts to stakeholders.

REQUIRED QUALIFICATIONS

· 5+ years of systems or cloud administration experience, including 3+ years of hands-on Microsoft 365 administration in production environments.

· Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.

· Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.

· Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.

· Strong documentation, collaboration, communication, prioritization, and change-management skills.

PREFERRED QUALIFICATIONS

· Experience with Microsoft 365 Copilot administration, readiness, or governance.

· Multi-tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.

· Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.

· Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.

· Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.

· Bachelor’s degree in a technology-related field or an equivalent combination of education, certifications, and relevant professional experience.