IT Systems Administrator

Required Qualifications

• 3 6 years of hands-on Microsoft 365 and Entra ID administration in a production tenant.
• Practical Intune experience: Autopilot enrollment, compliance policies, configuration profiles (Settings Catalog), platform scripts, and remediations.
• Strong Windows 11 endpoint management fundamentals: BitLocker, Defender for Endpoint, Windows Update for Business, and Conditional Access integration.
• Experience with identity and access management: Entra ID groups, Conditional Access policies, MFA enforcement, and enterprise app SSO (SAML/OIDC).
• PowerShell scripting on Windows and macOS for automation, remediation, and Graph API.
• Familiarity with Zero Trust network access concepts; hands-on experience with Cloudflare One or a comparable ZTNA platform is a strong plus
• Ability to read and interpret Graph API responses, troubleshoot MDM policy conflicts, and diagnose compliance failures from registry and log evidence
• Clear written communication able to document configurations, write runbooks, and explain technical decisions to non-technical stakeholders

Preferred

• Experience in a PE-backed, roll-up, or multi-entity operating environment where standardization across acquired companies is a core objective
• Cloudflare Zero Trust administration: Gateway policies, WARP client deployment via Intune, device posture checks, and Entra ID IdP integration
• Microsoft 365 Certified: Endpoint Administrator Associate, or equivalent hands-on experience
• Familiarity with CMMC Level 2 requirements and GCC High tenancy for defense-adjacent operating companies
• Experience governing an MSP relationship: defining SLAs, reviewing ticket quality, and managing escalation paths
• Exposure to SharePoint Online administration, OneDrive KFM policy management, and Teams Rooms configuration
• Bachelor s degree in Information Technology, Computer Science, or a related field, or equivalent demonstrated experience

Working Conditions

Hybrid-friendly, based in Dallas or New York City. Travel to acquired OpCo sites for device onboarding and infrastructure assessment typically aligned to acquisition cadence and concentrated in the 30 60 days following a close (~25 35% during active onboarding periods).

This role requires on-call availability for P1 incidents affecting executive-tier users or critical SaaS platform access.