System Administrator

Responsibilities

• Serve as first point of contact for technical issues, managing the ticket queue to defined response and resolution SLAs.
• Diagnose and resolve hardware, software, network, and account access issues, protecting uptime and the end-user experience.
• Escalate to other technical teams per defined criteria, with a clean handoff and follow-through to resolution.
• Categorize and prioritize incidents and serve as incident command for internal and customer-facing disruptions, coordinating responding teams and owning communications to users, customers, and executives through restoration, root-cause analysis, and remediation tracking (root-cause content owned by the accountable engineering teams).
• Deploy and maintain end-user devices, peripherals, and workstation software, including mobile device management, endpoint packaging, and allow-listing.
• Administer corporate collaboration and productivity systems (mailboxes, mail groups, Teams, SharePoint, OneDrive) and manage licenses and renewals, including AI-tooling enablement (e.g., Claude Desktop, Copilot) under Security-defined policy.
• Operate corporate networking (cloud and end-user VPN) and support customer hosting environments — access and remote-access troubleshooting, scheduled customer jobs, and batch file processes. Administer the Linux servers supporting these workloads — package and repository management, service and daemon configuration, log and performance troubleshooting, filesystem and storage management, and SSH key and sudo access administration under least privilege.
• Administer and maintain remote-access infrastructure — RD Web gateways and Azure Virtual Desktop — serving both corporate and customer access , including AVD host pool and session host lifecycle, session host image build and update cycles, application group and workspace assignment, FSLogix profile management, capacity and autoscale tuning, and user session troubleshooting .
• Administer identity and directory services — Entra ID tenants and on-prem Active Directory (users, groups, GPO, OUs), SSO / federated authentication configuration (Entra, Auth0, FusionAuth), and MFA and Conditional Access — under established security policy and least privilege.
• Own onboarding/offboarding provisioning (including HR-to-directory sync) and internal access requests for applications, shares, mail groups, and licenses; run periodic dormant-account and access reviews that produce SOC 2 and HIPAA audit evidence.