IT Systems Engineer

You own the identity, collaboration, and endpoint platforms every employee depends on: Active Directory and Entra ID, Microsoft 365 and Google Workspace, SSO for our SaaS stack, and device management across Windows and macOS. You script the repetitive work and document what you build.

Responsibilities:

• Administer Active Directory and Entra ID: user lifecycle, groups, GPO, DNS, Entra Connect and hybrid sync health, Conditional Access, privileged-role and stale-account hygiene
• Administer Microsoft 365 (Exchange, Teams, licensing) and Google Workspace (org units, groups, Drive governance, Entra-federated auth, multi-domain coexistence)
• Own SSO onboarding and maintenance for SaaS applications in Entra (SAML/OIDC, SCIM where supported)
• Endpoint management: Intune for Windows and Jamf for macOS, covering enrollment, compliance policy, patching, app deployment, and configuration baselines, in partnership with the desktop support team
• Administer Mimecast and Webex Control Hub
• Use scripting to make IT operations faster and more consistent: PowerShell and Graph for bulk user and license changes, group cleanup, reporting on stale accounts and device compliance, and Intune/Jamf deployment scripts. Look for the repetitive manual task and script it away
• Own certificate renewals, service accounts, and backup verification for identity and SaaS data
• Hands-on presence for the KC HQ: server room and network closet work, hardware receiving and staging, and onsite backup for AV and conference systems when the desktop team needs it
• Maintain runbooks in the IT Confluence space
• Tier 2 escalation for identity, licensing, collaboration, and endpoint tickets

Qualities:

• 4+ years in a Windows/Entra environment of 500+ users: AD (GPO, DNS, replication troubleshooting), Entra Connect, Conditional Access
• Hands-on Intune and Jamf administration
• 2+ years administering Google Workspace, ideally alongside M365
• Comfortable in PowerShell: you write your own scripts for day-to-day admin work (bulk changes, reporting, Intune remediations) and can read and adapt Graph API calls
• SSO configuration and troubleshooting (Entra enterprise apps)
• Networking literacy (DNS, DHCP, VLANs, VPN)
• Documents without being asked
• Plus: Jira/Confluence administration, Mimecast, agency or professional-services background