Systems Administrator III – Security Services - HighPoint Technology Group

BASIC FUNCTION:  The Systems Administrator III – Security Services will be responsible for designing, implementing, and managing secure customer networks within a fast-paced MSP environment.  In this dynamic role, your primary focus will be leveraging security principles and methodologies to enhance customer's identity management, compliance, secure posture, and access control.  You will also participate in ongoing technical research and development efforts to enable continuing innovation within the customer's environment.  This is a fast-paced, Disney inspired customer service environment, so you'll need to be up for a challenge.   

REQUIRED QUALIFICATIONS:

• Required to have 4+ years' client-facing IT experience, preferably in a managed services or multi-tenant support organization.
• CISSP or equivalent certification is required.
• 7+ years of strong, hands-on experience in hardware and Microsoft server operating system Management (Windows 2012 - current) in a networked environment.
• 5-7 years of experience with Microsoft's Active Directory and Entra, including Office 365 and all related collaboration platforms (SharePoint, OneDrive, Teams, etc.).
• Three (3) years' experience in providing high level network design and implementation skills and combine technical intelligence with communication and presentation abilities.
• Three (3) years' experience in leading a project in Design, Implementation, and Support.
• Experience in the setup and management of Virtual and Cloud-based environments. This includes VMware, Hyper-V, and Azure. VMware and Microsoft certification preferred.
• Knowledge and experience with design, implementation and support with Two-Factor Authentication.
• 5+ years of experience with switch/router/firewall components (Sophos, Cisco, Juniper, Ubiquiti, Meraki, etc.) and troubleshooting complex network issues.

PREFERRED QUALIFICATIONS:

• Excellent problem-solving abilities and a strong sense of ownership.
• Strong understanding of identity and access management (IAM) principles, protocols, and standards such as SAML, OAuth, OpenID Connect, and SCIM.
• Experience with implementing and managing Microsoft 365 solutions, including migration from on-premises systems to the cloud
• Knowledge of cloud security best practices and understanding of regulatory requirements such as GDPR, HIPAA, SOX, etc.
• Current IT professional certifications from Microsoft, VMware, Cisco, CompTIA, or other preferred vendors desired.
• Experience with scripting and automation tools (PowerShell, Azure CLI, etc.).

PRINCIPAL ACCOUNTABILITIES:

• Design and implement identity management strategies within tenant Microsoft 365 environments using Azure Entra or other identify management capabilities with the Microsoft suite of administration consoles.
• Manage and administer Microsoft 365 environment, including Exchange Online, SharePoint Online, OneDrive for Business, and Teams
• Implement and manage Microsoft 365 solutions, including migration from on-premises systems to the cloud
• Troubleshoot and resolve Microsoft 365 issues, including user access, connectivity, and performance issues
• Set-up and management of Virtual and Cloud-based networks to include VMware, Hyper-V, and Azure.
• Provides installation, support, and maintenance of servers, network infrastructure devices, wireless network components, and other computer systems.
• Ensure secure authentication and authorization of users across cloud and hybrid environments.
• Develop and maintain access policies in alignment with organizational needs and compliance standards.
• Collaborate with the IT security team to design and implement conditional access policies and multi-factor authentication.
• Conduct regular audits of identity and access management policies and procedures.
• Provide training and support to IT staff and end-users regarding identity and access management best practices.
• Keep abreast of the latest security trends, threats, and mitigating technologies in identity and access management.
• Act as a technical lead during incident responses that involve identity compromise or access breaches.
• Work with vendors and external stakeholders to evaluate and implement new identity management
• Demonstrate ability to project a Disney inspired customer service attitude with clients over the phone, on-site and through emails to resolve all client project requests/questions.
• Provide leadership and mentoring to other System Administrators and desktop support staff.
• Support a 24x7 staffing model with on-call shifts that include weekends and Holidays.
• Other duties as assigned.