Enterprise Systems Administrator

Ultipro; Monterey (CA); Hybrid; USD 70,000 - 84,000; Full time

Job summary

Monterey Bay Aquarium is seeking an experienced Enterprise Systems Administrator to manage organization-wide Microsoft 365 A5, Entra, Intune, Exchange, MFA/passwordless, SSO, SharePoint, Teams, VoIP, and licensing. You will ensure reliability, security, documentation, and compliance across multiple platforms.

Under supervision, you’ll implement system builds, patches, and hardening, maintain runbooks, and support audits.

Qualifications

• Two-year or four-year degree or equivalent combination of education, certification, training, and experience.
• 4+ years of hands-on enterprise systems administration in production environments.
• Proven hands-on experience administering Microsoft 365 in an enterprise environment including Entra, Intune, Exchange, MFA, SSO, SharePoint, Teams, VoIP, and licensing.

Responsibilities

• Administer and maintain enterprise servers, storage, virtualization, cloud infrastructure, directory services, and related platforms.
• Configure, secure, and support Microsoft 365 A5 with Entra, Intune, Exchange, MFA, SSO, SharePoint, and Teams.
• Troubleshoot availability, performance, and security issues; document findings and escalate as needed.
• Implement system builds, upgrades, migrations, and change records with testing and rollback steps.
• Apply patching, hardening, encryption, and least-privilege controls across systems.
• Monitor backups and recovery processes; perform restores and tests for business continuity.
• Automate administration and monitoring to improve reliability and reporting.
• Maintain architecture diagrams, runbooks, and knowledge articles.
• Manage onboarding, transfers, offboarding, and secure disposal of accounts and devices.
• Collaborate with owners, staff, and auditors; provide evidence for audits and remediation.

Skills

Strong troubleshooting

Documentation and reporting

Security best practices

Automation mindset

Cross-functional collaboration

Education

2/4 year degree or equivalent

Associates or better

Bachelors or better

Tools

Microsoft 365 Admin

Entra

Intune

Exchange

MFA/passwordless

SSO

SharePoint

Teams

VoIP

PowerShell scripting

Job description

Job Category: TEC Infrastructure & Operations

Requisition Number: ENTER002143

• Full-Time
• Hybrid

Location

Description

At the Monterey Bay Aquarium, we are passionate about creating an inclusive workplace that celebrates and values diversity. We firmly believe that having a team of diverse backgrounds and voices, working together, increases our capacity to serve our visitors and fulfill our mission.We welcome people from all backgrounds into our team and strongly encourage people of color, LGBTQ+ individuals, veterans, and people with disabilities to apply.

Priority deadline for applications is October 9, 2026 at 8am PDT. Due to the volume of incoming applications, the role may be closed earlier than October 9, 2026 at 8am PDT.

Job Summary:

Under general supervision, perform hands‑on administration, configuration, security, maintenance, and lifecycle support for organization-wide enterprise systems and cloud services. This position provides dedicated systems administration across all enterprise platforms. Administer Microsoft 365 A5 as the foundational platform for identity, access, endpoint management, messaging, collaboration, communications, licensing, security, and integrations. Ensure services are reliable, secure, documented, and operated according to established standards, change control, audit requirements, and service levels; perform other duties as required.

Core Activities:

• Administer and maintain enterprise servers, storage, virtualization, cloud infrastructure, directory services, certificates, and related platforms using established standards and procedures.
• Configure, secure, and support Microsoft 365 A5, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user lifecycle, access, and rights management.
• Troubleshoot and resolve systems availability, performance, authentication, configuration, integration, and security issues; document findings and elevate high-risk or unusually complex conditions.
• Implement approved system builds, upgrades, migrations, integrations, and configuration changes; complete testing, change records, rollback steps, and production validation.
• Apply and verify patching, hardening, encryption, privileged-access, least-privilege, and configuration-baseline controls across systems and endpoints, in coordination with IT Security.
• Monitor backup, restore, and recovery processes; perform approved restores and recovery tests and maintain evidence supporting business continuity and disaster recovery.
• Automate administration, deployment, monitoring, alerting, dashboards, and reporting to improve reliability and consistency.
• Maintain architecture diagrams, inventories, configuration records, standards, procedures, runbooks, support documentation, and knowledge articles.
• Perform account, device, mailbox, access, and group lifecycle tasks for onboarding, transfers, offboarding, decommissioning, and secure disposal.
• Gather approved requirements, resolve issues, and support integrations, in collaboration with business/system owners, technical staff.
• Research platform updates and options; prepare recommendations for review addressing security, risk, dependencies, supportability, cost, and impact.
• Respond to escalated requests and after-hours emergencies through restoration and documentation; support continuous operation of critical services.
• Provide technical evidence for audits, assessments, and remediation activities; share system knowledge and procedures with technical colleagues.
• Two-year or four-year college degree or equivalent combination of education, certification, training, and experience
• 4+ years of hands‑on enterprise systems administration or closely related experience supporting production environments
• Proven hands‑on experience administering Microsoft 365 in an enterprise environment, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user/access lifecycle, and rights management
• Working knowledge of servers, storage, virtualization, cloud infrastructure, backup/recovery, monitoring, certificates, and enterprise platform operations
• Working knowledge of identity and access management, privileged access, least privilege, authentication, authorization, and directory-service concepts
• Experience with endpoint enrollment, compliance, configuration, application deployment, encryption, inventory, and device lifecycle processes
• Experience implementing approved system builds, upgrades, migrations, integrations, patching, and production changes
• Experience with backup monitoring, restores, recovery testing, recovery objectives, business continuity, and evidence retention
• Ability to use scripting and automation to improve routine administration, deployment, monitoring, and reporting
• Knowledge of security hardening, configuration baselines, vulnerability remediation, change control, and audit support
• Working knowledge of networking concepts relevant to systems administration, including name resolution, addressing, routing, secure communications, and service connectivity
• Strong troubleshooting skills across integrated enterprise services and ability to identify when escalation is required
• Ability to translate documented business and technical requirements into secure, reliable, and supportable system configurations
• Ability to work independently with general direction, follow established standards, and seek guidance for high-risk or unusually complex decisions
• Ability to prioritize assigned work, meet service expectations, and complete tasks accurately
• Strong written and verbal communication skills, including the ability to explain technical issues to technical and nontechnical audiences
• Strong documentation, organization, and attention-to-detail skills
• Collaborative service orientation and ability to work effectively with business/system owners, technical peers, vendors, and auditors
• Ability to protect confidential information and maintain appropriate security, privacy, and access controls
• Ability to work within and maintain Monterey Bay Aquarium's Core Values

Physical Requirements to Perform Essential Job Functions:

• Typical office equipment
• Constant sitting, standing, walking, bending
• Occasional unassisted lifting up to 50 lbs.
• Typical office environment, main aquarium, occasional offsite events

Annual Compensation Range:
$70,304 - $84,000 USD annually. Starting rate will vary based on previous experience and relevant skills/knowledge set.

Qualifications

Education

Preferred

Associates or better.

Bachelors or better.

Technical/other training or better.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.