Information Technology System Administrator

About the Opportunity
The IT Systems Administrator will oversee the internal technology estate, reporting to the Senior Director, Platform Engineering. The primary mission of this role is to ensure every new hire is fully productive on their first day and fully deprovisioned upon departure, maintaining identity, endpoint, and SaaS systems through automated, repeatable processes rather than tribal knowledge.
Operating directly within the Platform Engineering team rather than a siloed IT department, this position collaborates alongside platform engineers, utilizes modern tooling, and prioritizes automating recurring manual tasks. The ideal candidate is pragmatic, service-oriented, comfortable acting as the primary organizational resource for access and equipment, and eager to leverage AI tooling in day-to-day operations.
This is a full-time, primarily remote role based in the United States, requiring occasional annual team on-sites.
Key Responsibilities
• Administer the Microsoft Entra ID workforce tenant and Microsoft 365 environment, including user accounts, groups, licensing, conditional access, and MFA policies.
• Manage SSO and SAML/OIDC application integrations across a federated SaaS estate (including GitHub Enterprise Cloud, Salesforce, MongoDB Atlas, HubSpot, Keeper, OpenVPN, Autodesk, and additional applications), onboarding new software as needed.
• Conduct periodic user access reviews and least-privilege cleanups, generating verifiable evidence for compliance audits.
• Support evolving identity and directory initiatives, including domain changes, directory migrations, and platform consolidation.
• Oversee the device fleet via Rippling, managing enrollment, configuration, compliance policies, patching, and encryption baselines across laptops and mobile devices.
• Direct hardware asset inventory and lifecycle operations, covering procurement, imaging, shipping to distributed personnel, refreshes, and secure retirement.
• Maintain accurate, real-time inventories of hardware devices, software, and SaaS licenses without reliance on reactive quarterly audits.
• Drive the end-to-end employee onboarding and offboarding lifecycle toward zero-touch, same-day provisioning and deprovisioning using Rippling as the central system of record.
• Act as the escalation point for employee IT inquiries regarding access, accounts, hardware, connectivity, conferencing, and technical impediments.
• Administer organization-wide SaaS applications, including provisioning, deprovisioning, license reconciliation, and vendor renewal coordination.
• Automate recurring IT workflows, such as scripted provisioning, access reporting, license reconciliation, and compliance evidence gathering.
• Integrate AI tools such as Claude Code and Cursor into everyday workflows, drafting internal runbooks executable by both human operators and automated agents.
• Support company-wide AI tooling administration, including seat management, license allocation, access provisioning, and internal adoption.
• Support SOC 2 and NIST 800-171 audits end to end by compiling evidence, addressing auditor inquiries, tracking remediation items, and owning IT-side controls for access management, account lifecycles, asset tracking, MFA enforcement, and device compliance.
• Administer the Vanta compliance automation platform, maintaining continuous integrations across identity, device, and ticketing systems to streamline evidence collection.
• Oversee employee-facing compliance requirements, such as security awareness training completion, policy acknowledgments, e-signatures, and access review attestations.
• Maintain up-to-date IT and security policy documentation aligned with actual operational practices.
• Administer the Keeper password and secrets management platform to enforce organizational credential hygiene.
• Maintain internal network and remote access infrastructure, including SAML-integrated VPN connections.
• Author and maintain clear runbooks, knowledge base articles, and self-service documentation.
Qualifications
• 3 to 5 years of hands-on IT systems administration experience supporting a distributed workforce (a formal degree is welcome, but practical experience is the primary evaluation criterion).
• Demonstrated production experience administering Microsoft Entra ID (Azure AD) and Microsoft 365.
• Hands-on experience with company-scale MDM and endpoint management (such as Rippling, Jamf, Kandji, or comparable tools), including enrollment, compliance policies, and configuration baselines.
• Practical experience configuring SSO/SAML application integrations and troubleshooting federation issues.
• Experience managing end-to-end employee onboarding and offboarding, including access provisioning and deprovisioning.
• Scripting proficiency in PowerShell, Bash, or Python to automate operational tasks.
• Experience supporting security audits or compliance programs, including evidence collection, auditor communication, and control documentation maintenance.
• Strong written communication and technical writing skills, with the ability to produce functional, user-friendly documentation.
• Enthusiasm for utilizing AI tooling in operational workflows, paired with the aptitude to learn new tools quickly.
• Strong service orientation and sound judgment regarding issue urgency and prioritization.
Preferred Qualifications
• Experience administering Google Workspace.
• Direct experience administering Rippling or another HRIS used as the provisioning source of truth (such as Workday or BambooHR).
• Direct experience with SOC 2 or NIST 800-171 (or adjacent frameworks such as NIST 800-53, CMMC, or ISO 27001), as well as compliance platforms like Vanta, Drata, or Apptega.
• Experience with infrastructure as code (Terraform or OpenTofu) or configuration management for internal systems.
• Familiarity with GitHub and GitHub Actions administration, including organization and access management.
• Experience managing enterprise-scale password or secrets management platforms.
• Exposure to Azure, Kubernetes, or platform engineering environments.
• Prior experience building internal automations, integrations, or agents.
• Professional background in construction, MEP, manufacturing, or other non-software-native industries.
Benefits
• Comprehensive and competitive health benefits plan.
• 401(k) retirement plan with employer matching contributions.
• 20 days of annual paid time off (PTO).
Employment Notices
The organization participates in E-Verify. Following hire, employee eligibility to work in the United States will be verified by submitting Form I-9 information to the Social Security Administration and, if necessary, the Department of Homeland Security. This verification occurs strictly post-hire and is never used to pre-screen job applicants.

Work arrangement
No