Associate Systems Administrator

The Association of Colorado Independent Schools; Denver (CO); On-site; USD 70,000 - 90,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life Insurance

403(b) retirement plan

Job summary

Colorado Academy is seeking an IT professional to administer endpoint security, cloud identities, and instructional systems like Canvas LMS and Blackbaud SIS. You will lead security improvements, support faculty and students, and back up core systems while driving technology projects from idea to rollout.

The role blends hands-on support with project work in a small department, offering broad exposure and ownership of meaningful initiatives in a dynamic K–12 environment.

Qualifications

• 3–6 years of hands-on IT experience in systems administration, infrastructure, or a similar broad technical role.
• Working familiarity across most of the following areas, with hands-on administrative experience in several: endpoint and device management, cloud identity and directory services, endpoint security tooling, network and firewall administration, or application and API integrations.
• Proven ability to take an ambiguous problem, research it independently, and deliver a working solution.
• Track record of bringing forward improvement ideas, not just completing assigned work.
• Experience managing technology projects through to completion, including planning, documentation, and user-facing rollout.
• Strong interpersonal and communication skills, including written documentation and the ability to explain technical concepts patiently to non-technical users across a wide range of ages and comfort levels.
• Genuine interest in learning systems you have not used before. The tool set here will change and this role is expected to change with it.

Responsibilities

• Administer endpoint security and security awareness platforms (CrowdStrike, Abnormal Security, and a security awareness training platform), including policy configuration, alert triage, phishing campaign management, and reporting.
• Implement security improvements and support incident response — hardening configurations, tightening access controls, and closing gaps identified through audits, assessments, or incidents.
• Support administration of Apple device management (Jamf Pro), cloud identity (Microsoft Entra ID, Google Workspace), and network and security infrastructure (Palo Alto firewall, GlobalProtect VPN).
• Assist with administration and troubleshooting of instructional systems and their integrations, including Canvas LMS and Blackbaud SIS.
• Serve as backup administrator for systems primarily owned by other team members, ensuring continuity during absences.
• Execute technology projects assigned by the Director of Technology: independently research options, evaluate vendors and tools, develop implementation plans, and manage rollout, documentation, and end-user training.
• Proactively identify opportunities to improve or modernize school systems; independently research options and present concrete, well-supported proposals to the Director of Technology for consideration.
• Design and build better systems and workflows — automation, scripting, documentation, and process redesign — to reduce manual effort across the department.
• Manage project timelines, dependencies, and communication with stakeholders across the school.
• Approach unfamiliar problems resourcefully: research independently, test solutions, and propose creative approaches rather than waiting for direction.

Skills

IT experience

Systems admin

Cloud identity

Endpoint security

Network admin

Automation scripting

Project management

Communication skills

Learning new systems

Tools

Jamf Pro

Microsoft Entra ID

Google Workspace

Palo Alto Networks

CrowdStrike

PowerShell

Python

Bash

Canvas LMS

Blackbaud SIS

Job description

ACIS accredits, supports, and advances the interests of Colorado independent schools.

• Administer endpoint security and security awareness platforms (CrowdStrike, Abnormal Security, and a security awareness training platform), including policy configuration, alert triage, phishing campaign management, and reporting.
• Implement security improvements and support incident response — hardening configurations, tightening access controls, and closing gaps identified through audits, assessments, or incidents.
• Support administration of Apple device management (Jamf Pro), cloud identity (Microsoft Entra ID, Google Workspace), and network and security infrastructure (Palo Alto firewall, GlobalProtect VPN).
• Assist with administration and troubleshooting of instructional systems and their integrations, including Canvas LMS and Blackbaud SIS.
• Serve as backup administrator for systems primarily owned by other team members, ensuring continuity during absences.

Projects, Research, and Process Improvement

• Execute technology projects assigned by the Director of Technology: independently research options, evaluate vendors and tools, develop implementation plans, and manage rollout, documentation, and end-user training.
• Proactively identify opportunities to improve or modernize school systems; independently research options and present concrete, well-supported proposals to the Director of Technology for consideration.
• Design and build better systems and workflows — automation, scripting, documentation, and process redesign — to reduce manual effort across the department.
• Manage project timelines, dependencies, and communication with stakeholders across the school.
• Approach unfamiliar problems resourcefully: research independently, test solutions, and propose creative approaches rather than waiting for direction.

Support

• Provide direct technical support to faculty, staff, and students as a regular part of the role.
• Serve as escalation for complex issues the support team cannot resolve.
• Increase support coverage during high-volume periods, including start of school year, major deployments, staff absences, and school events.
• Assist with classroom AV and event technology support as needed.

Required Qualifications

• 3–6 years of hands-on IT experience in systems administration, infrastructure, or a similar broad technical role.
• Working familiarity across most of the following areas, with hands-on administrative experience in several: endpoint and device management, cloud identity and directory services, endpoint security tooling, network and firewall administration, or application and API integrations.
• Proven ability to take an ambiguous problem, research it independently, and deliver a working solution.
• Track record of bringing forward improvement ideas, not just completing assigned work.
• Experience managing technology projects through to completion, including planning, documentation, and user-facing rollout.
• Strong interpersonal and communication skills, including written documentation and the ability to explain technical concepts patiently to non-technical users across a wide range of ages and comfort levels.
• Genuine interest in learning systems you have not used before. The tool set here will change and this role is expected to change with it.

Preferred Qualifications

• Experience with any of: Jamf Pro, Microsoft Entra ID, Google Workspace administration, Palo Alto Networks, CrowdStrike.
• Scripting and automation experience (PowerShell, Python, Bash).
• Experience with SIS or LMS platforms such as Blackbaud and Canvas.
• Security certification such as CompTIA Security+ or an equivalent vendor credential.
• Prior experience in K–12 or higher education.

What This Role Is (and Isn't)

This is a small department — currently four people. Everyone here is involved in everything to some degree, and the person in this role will spend part of their time on hands‑on support work alongside their project responsibilities. It is also a highly people‑facing job: you will be working directly with faculty, staff, and students every day, and occasionally with parents. Patience, approachability, and the ability to meet people at their comfort level with technology matter as much here as technical skill. In exchange, there is unusually broad exposure and real ownership of meaningful work. Candidates looking to specialize narrowly in a single platform will find this role frustrating. Candidates who want to build wide expertise quickly, and who bring their own ideas rather than waiting for a queue, will do well.

All employees at CA are expected to carry out the CA Mission, "Creating Curious, Kind, Courageous, and Adventurous Learners and Leaders," to support the vision of CA, and to contribute to the life of the school outside of the classroom.

T his job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications required for the position. Colorado Academy reserves the right to modify or revise this job description at any time.

The pay for this position is $70,000 - $90,000. Although this is a good faith and reasonable estimate of the possible compensation at the time of posting, Colorado Academy reserves the right to pay more or less than the posted range. Any wage differential that may exist for the position does not relate to sex, gender, or gender identity, but relates solely to a seniority system, a merit system, or relevant education, training and/or experience. Medical, Dental, Vision, and Life Insurance benefit programs are available, as is a 403(b) retirement plan. Eligibility for all benefit programs is defined by the applicable plan document.

Applicants are invited to visit the Colorado Academy website ( www.coloradoacademy.org ) to learn more about the program and the school.

Colorado Academy prohibits discrimination and unlawful harassment in any of its programs, procedures, or practices on the basis of age, color, disability, national origin, ancestry, race, religion or creed, gender expression, sex, sexual orientation, gender identity, military service, marital status, genetic information, or other protected classifications defined by federal or Colorado laws. The policy applies in all aspects of employment with CA.

Colorado Academy is committed to fostering an inclusive, respectful, and equitable workplace. Employees are expected to engage in professional conduct that reflects cultural awareness, respect for differing identities, and openness to diverse perspectives. Employment decisions including hiring, evaluation, promotion, and compensation are based on qualifications, performance, and institutional needs.