Sr. IT System Administrator

Responsibilities

• Infrastructure, Cloud, and Network Operations
• Administer, monitor, and improve Azure infrastructure, Entra ID, Azure networking, virtual machines, storage, resource health, access paths, and related cloud services
• Manage and support Windows Server, AD DS, DNS, GPO, DFS, IIS, VMware, backup/recovery dependencies, and other core infrastructure services as assigned
• Coordinate with vendors/MSPs for office network, firewall, switching, Wi-Fi, ISP, Azure, Cloudflare, and infrastructure work while retaining internal ownership of follow-up and closure
• Support Cloudflare WARP, Zero Trust tunnels, access policies, network routing dependencies, and approved remote/private access paths in coordination with Security and system owners
• Monitor system health, capacity, availability, backup posture, and configuration drift; identify issues before they become recurring support problems
• Endpoint, Patch, and Device Management
• Own day-to-day administration and health of endpoint management platforms such as Microsoft Intune, Microsoft Defender for Endpoint, KACE, Jamf, and any future macOS MDM replacement such as IRU/Kandji-style tooling
• Deploy, monitor, and validate operating system patches, application updates, configuration profiles, security baselines, compliance policies, and endpoint remediation scripts
• Support Windows Autopilot, Intune enrollment, Jamf enrollment, device rebuilds, endpoint readiness checks, BitLocker/FileVault, LAPS, ScreenConnect, Cloudflare WARP, KACE, and Defender onboarding
• Investigate device issues affecting employee productivity, including hardware failures, application problems, update/reboot issues, browser and extension issues, and endpoint-policy conflicts
• Maintain accurate runbooks for device onboarding, rebuild, patching, quarantine, remediation, and return-to-service workflows
• Security Operations and Incident Support
• Review, triage, and escalate security alerts from Microsoft Defender, Rapid7, KACE, Intune, Entra sign-in logs, Cloudflare, and related systems according to Propel security and compliance processes
• Work with Information Security on suspicious activity, compromised-device investigations, risky sign-ins, malware alerts, phishing-related endpoint activity, and data-loss or DLP-triggered events
• Gather and preserve evidence through approved tooling, including Defender investigation packages, Live Response where authorized, full scan results, logs, timelines, affected-device scope, and remediation evidence
• Support containment actions when approved, including device isolation, session revocation, access blocking, password/MFA recovery actions, device wipe/rebuild, and controlled return-to-service validation
• Document incident actions, approvals, evidence, and recovery steps in Jira or the approved security record without exposing unnecessary sensitive details to requester-facing comments
• Microsoft 365, Identity, SSO, and Data Protection
• Administer and support Microsoft 365 services including Exchange Online, Teams, SharePoint, OneDrive, Defender, Intune, Entra ID, enterprise applications, and related user/device policies
• Understand and support SSO concepts including SAML, OIDC, enterprise apps, app assignments, claims, certificates, groups, MFA, Conditional Access, and break-glass/rollback considerations
• Understand Microsoft Purview, DLP, information protection, retention, alerting, and email/data-flow controls sufficiently to troubleshoot issues and coordinate with Security, Legal/Privacy, and business owners
• Support access lifecycle requests where delegated, while ensuring manager, system owner, Security, P&C, Legal/Privacy, CCB, or data-owner approvals are obtained where required
• L3 Support, Coaching, and Escalation
• Serve as the L3 escalation resource for complex endpoint, identity, cloud, network, infrastructure, and security-support issues that cannot be resolved by L1/L2
• Coach L1/L2 team members on troubleshooting methods, evidence collection, ticket quality, customer communication, endpoint tooling, and when to escalate
• Help resolve employee hardware and software issues when advanced technical support is needed, including situations involving policy conflicts, device compliance, account/session issues, or business-critical applications
• Create and maintain practical support runbooks, checklists, knowledge articles, and escalation notes so recurring issues become easier for the team to handle
• Change Management, Documentation, and Audit Readiness
• Follow Propel change management and CCB processes for production, security, identity, endpoint, infrastructure, and business-impacting changes
• Prepare accurate change summaries, implementation plans, rollback plans, validation steps, and post-change updates for assigned work
• Maintain current documentation for architecture, access paths, configurations, administrative procedures, ownership boundaries, recurring checks, and operational standards
• Participate in internal/external audits, user access reviews, security reviews, evidence gathering, policy remediation, and compliance-related improvement work
• Ensure tickets and change records clearly show approvals, actions taken, validation results, remaining risks, and closure rationale