Responsibilities:

Systems Administration

• Perform advanced Windows Server administration, including user/group management, permissions, and performance monitoring.
• Administer and maintain Active Directory and Microsoft Entra ID, including identity lifecycle management and security policies.
• Design, implement, and maintain Group Policy configurations.
• Monitor system health and performance across client environments, proactively identifying and resolving issues.

Microsoft 365 Administration

• Perform advanced administration of Microsoft 365 tenants across multiple clients, including Exchange Online, SharePoint Online, Teams, and OneDrive for Business.
• Design, configure, and maintain Microsoft Intune policies, including device compliance, configuration profiles, application deployment, Windows Autopilot, and Endpoint Privilege Management (EPM).
• Administer Microsoft Entra ID (Azure AD), including identity lifecycle management, Conditional Access policies, Privileged Identity Management (PIM), role assignments, and B2B/B2C scenarios.
• Manage Microsoft Azure services, including Azure Virtual Machines, Azure Files, Azure Blob Storage, Azure Virtual Networks, and resource group governance.
• Configure and maintain Microsoft Defender for Endpoint, Defender for Business, and associated security policies.
• Administer Microsoft Purview compliance features, including Sensitivity Labels, Data Loss Prevention (DLP), Retention Policies, and Litigation Hold.
• Manage Microsoft 365 licensing, including allocation, optimization, and procurement coordination through distribution partners.
• Implement and maintain Microsoft Security Baselines across client tenants to align with frameworks such as the ACSC Essential Eight.

Automation & PowerShell

• Develop, maintain, and deploy intermediate to advanced PowerShell scripts to automate administrative tasks across Microsoft 365, Entra ID, Intune, Azure, and on-premises environments.
• Build and manage automation workflows using Microsoft Graph API, Power Automate, and REST API integrations.
• Create scripts for deployment via Datto RMM or other remote monitoring and management (RMM) platforms, including scheduled tasks, compliance checks, and system reporting.
• Maintain a library of reusable scripts and contribute documented automation solutions to the internal knowledge base.
• Troubleshoot and adapt existing scripts in response to platform changes or errors.

Infrastructure & Virtualization

• Maintain virtualization platforms, including VMware and Hyper-V.
• Monitor and optimize server performance, storage, and reliability.
• Assist in designing and implementing infrastructure projects, including deployments, migrations, and cloud transitions.

Backup & Disaster Recovery

• Configure, maintain, and monitor backup platforms to ensure reliable recovery.
• Administer enterprise backup solutions, including Acronis and Kaseya.
• Perform routine backup verification, testing, and auditing.

Security & Platform Administration

• Administer endpoint security and protection platforms.
• Work with the Kaseya ecosystem, including:
  • Datto RMM
  • IT Glue
  • Endpoint Security (AV, EDR, MDR)
  • SaaS Protection and Monitoring
  • Email Security (Graphus, INKY)

Support & Collaboration

• Provide Level 3 technical support by assisting the service desk with escalated technical issues.
• Mentor and provide technical guidance to junior engineers.
• Contribute to process improvements, technical documentation, and internal knowledge base resources.

Client Engagement

• Communicate with clients regarding system improvements, incidents, and technical recommendations.
• Assist with infrastructure planning, cloud adoption, and continuous improvement initiatives.

General Responsibilities

• Maintain accurate and up-to-date documentation for systems, environments, and operational procedures.
• Participate in internal meetings, training sessions, and ongoing professional development.
• Maintain a high standard of professionalism and deliver exceptional customer service in all client interactions.

What We’re Looking For:

5+ years’ experience in a Systems Administrator, Infrastructure Engineer, or Senior MSP Engineer role
Strong experience in Managed Service Provider (MSP) environments
Advanced Microsoft 365 administration
Hands-on experience building and managing Intune environments
Experience implementing Conditional Access policies and Group Policy configurations
Advanced PowerShell scripting (required)
Azure infrastructure administration
Active Directory & Entra ID expertise
Experience with Datto RMM, IT Glue, Halo PSA, or similar MSP tools is highly regarded