IT Systems Administrator

This is a fully remote position, open to applicants in Michigan.

📋 Description

• Administer and provide support for Microsoft Azure and Entra ID, encompassing users, groups, roles, conditional access, and authentication policies.

• Design, implement, and enhance Single Sign-On (SSO) integrations with both SaaS and internal applications utilizing SAML/OIDC.

• Maintain practices for identity governance, including access reviews, lifecycle processes, and role-based access controls.

• Collaborate with Security and Compliance teams to enforce Multi-Factor Authentication (MFA), least privilege principles, and secure access standards.

• Manage Microsoft Intune across Windows, macOS, iOS, and Android devices.

• Create and oversee device configuration profiles, compliance policies, security baselines, and application deployment policies.

• Support device provisioning, enrollment, remote wipe/retire, and device health reporting.

• Troubleshoot intricate endpoint issues and service desk escalations.

• Oversee IT asset lifecycle processes, including procurement intake, inventory management, assignment, refresh, returns, disposal, and audit preparedness.

• Maintain records of hardware and software inventory while ensuring license compliance and cost optimization.

• Package, deploy, and manage software applications, including version control, updates, and deprecations.

• Act as an escalation point for complex identity, SSO, endpoint configuration, and enterprise SaaS tickets.

• Analyze incident and request trends to determine root causes and enhance reliability.

• Develop documentation, Standard Operating Procedures (SOPs), and knowledge base articles.

• Identify and implement automation for provisioning, access changes, device actions, and reporting.

• Enhance service delivery through process optimization, monitoring, and operational metrics.

• Participate in change management, testing, rollout planning, and communication efforts.

⛳️ Requirements

• A minimum of 3 years of experience in IT systems administration, endpoint management, or identity/access management.

• Strong practical experience with Azure/Entra ID administration and Microsoft Intune.

• Experience in implementing and supporting SSO integrations (SAML, OIDC/OAuth2).

• Working knowledge of device compliance/security controls and endpoint troubleshooting techniques.

• Experience with asset management and software deployment/lifecycle processes.

• Familiarity with IT Service Management (ITSM) or ticketing systems such as Jira Service Management or ServiceNow, along with escalation workflows.

• Excellent documentation skills and the ability to convey technical concepts to non-technical users.

• Preferred: Experience with Windows Autopilot, Microsoft Defender for Endpoint, and best practices in Conditional Access.

• Preferred: Scripting/automation experience using PowerShell, Power Automate, or similar tools.

• Preferred: Experience supporting hybrid environments, Intune co-management scenarios, or Mobile Device Management (MDM) for macOS.

• Preferred: Knowledge of security frameworks and practices, including least privilege, MFA, access governance, and auditing controls.

• Applicants must be authorized to work in the United States on a permanent basis.

• Visa sponsorship is not available.

🏝️ Benefits

• Full-time employment.

• Equal Employment Opportunity and Affirmative Action employer.

• Reasonable accommodation for qualified individuals with disabilities.