IT Specialist

Lerch Bates; Highlands Ranch (CO); On-site; USD 65,000 - 75,000; Full time

Job summary

Lerch Bates is seeking an IT Specialist in Highlands Ranch, CO to support and enhance our Microsoft 365 environment, endpoint management, and network security across ~500 employees in 28 locations.

You will work closely with the VP of IT to deliver reliable, scalable IT solutions, drive technology improvements, and mentor staff in a fast-paced, collaborative setting. ESOP ownership is a key benefit of joining Lerch Bates.

Qualifications

• Bachelor’s degree or equivalent experience in IT or a related field.
• 4–8 years of progressive IT support, systems administration, or infrastructure experience.
• Experience administering Microsoft 365 environments for 250+ users.
• Strong knowledge of Azure AD, Intune, MFA, Conditional Access, and security features.
• Ability to troubleshoot hardware, software, networking, and cloud-based technologies.

Responsibilities

• Administer and support the Microsoft 365 ecosystem including Exchange Online and Teams.
• Manage identities, licensing, and access controls in Azure AD/Entra ID.
• Configure Conditional Access and MFA security features.
• Deploy endpoints via Intune and handle patch management.
• Support Copilot adoption and AI-enabled Microsoft technologies.
• Maintain Purview solutions, including DLP and compliance controls.
• Serve as senior escalation point for hardware, software, cloud, and network issues.
• Troubleshoot problems across multiple office locations.
• Install and maintain desktops, OS, and peripherals.
• Support backup, disaster recovery, and business continuity for on-prem and cloud.
• Coordinate with network providers to maintain firewall, VPN, wireless, and site connectivity.
• Assist with Deltek Vantagepoint/Dynamics 365 and admin of business apps.
• Collaborate on technology improvements and IT projects.
• Manage IT hardware/software inventories; maintain runbooks and docs.
• Communicate project updates and incident resolutions to stakeholders.
• Participate in IT security initiatives, audits, risk assessments, and compliance.

Skills

Microsoft 365 administration

Endpoint management

Network infrastructure

IT security practices

Customer service and communication

Education

Bachelor's degree in Information Technology, Computer Science, or related field

Tools

Azure AD (Entra ID)

Microsoft Intune

Microsoft Purview

Exchange Online / SharePoint Online

Deltek Vantagepoint

Microsoft Dynamics 365

Job description

Job DetailsJob Location: Highlands Ranch, CO 80129Salary Range: $65,000.00 - $75,000.00 Salary/yearDepartment: Information Technology

Lerch Bates is seeking an IT Specialist to support and enhance the technology systems that power our global organization.

As an IT Specialist, you will serve as a key technical resource responsible for administering and supporting our Microsoft 365 environment, endpoint management platform, network infrastructure, and IT security initiatives. You'll work closely with the VP of IT to maintain reliable, secure, and scalable technology solutions that support approximately 500 employees across 28 office locations.

This role combines advanced technical troubleshooting, cloud administration, Microsoft 365 management, and infrastructure support. You'll help drive technology improvements, support AI-enabled business tools like Microsoft Copilot, strengthen security practices, and ensure employees have the technology resources they need to be successful.

This position is ideal for a technology professional who enjoys solving complex technical challenges, improving systems, mentoring others, and contributing to strategic IT initiatives in a collaborative and fast-paced environment.

Become an Employee-Owner

One of the biggest advantages of working at Lerch Bates is that we are 100% employee-owned through our Employee Stock Ownership Plan (ESOP).

Unlike many companies that offer only a salary and retirement plan, eligible employees receive company-funded ESOP shares at no cost to them as part of their long-term retirement benefits.

As Lerch Bates grows, employee-owners share in the company's success. For many employees, the ESOP becomes one of the most valuable financial benefits of their career by helping build meaningful long-term wealth in addition to their salary and traditional 401(k).

When you join Lerch Bates, you are not just building better buildings. You also have the opportunity to build your financial future alongside the company's success.

About Lerch Bates

Lerch Bates (LB) is a global technical consulting firm focused on improving how buildings perform for owners, designers, and the people who use them every day. For more than 75 years we’ve partnered on some of the world’s most complex and high-profile projects. Today we provide Total Building Performance expertise that integrates Building Science and Building Flow into a unified delivery model.

Our work spans design, construction, investigation, repair, rehabilitation, management, and modernization with one consistent goal: helping clients make confident, well-informed decisions in an increasingly complex built environment.

We are 100% employee-owned through our ESOP. That means when the company succeeds, our employee-owners share in that success. It's more than a retirement benefit—it's an ownership mindset backed by the opportunity to build long-term financial value while helping shape the future of the company.

What You’ll Do:

The duties listed below are intended only as illustrations of the various types of work that may be performed in this position. They are not intended to prescribe or restrict the assignments that management may make.

Microsoft 365 & Cloud Administration

• Administer and support the Microsoft 365 ecosystem, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and related services.
• Manage user identities, licensing, security groups, and access controls within Microsoft Entra ID (Azure AD).
• Configure and support Conditional Access policies, Multi-Factor Authentication (MFA), and other security features.
• Deploy, manage, and maintain endpoints through Microsoft Intune, including application deployment, device compliance, and patch management.
• Support implementation and adoption of Microsoft Copilot and AI-enabled Microsoft technologies.
• Configure and maintain Microsoft Purview solutions, including Data Loss Prevention (DLP), sensitivity labels, and compliance controls.

Technical Support & Infrastructure

• Serve as a senior escalation point for complex hardware, software, cloud, and network-related issues.
• Troubleshoot and resolve technical problems affecting employees across multiple office locations.
• Install, configure, and maintain desktop and laptop systems, operating systems, and peripheral hardware.
• Support backup, disaster recovery, and business continuity processes for both on-premises and cloud environments.
• Partner with network service providers and internal stakeholders to maintain firewall, VPN, wireless, and site connectivity.

Business Systems & Operational Support

• Assist with administration and support of business applications, including Deltek Vantagepoint and Microsoft Dynamics 365.
• Collaborate with IT leadership to implement technology improvements and infrastructure projects.
• Manage IT hardware and software asset inventories throughout the equipment lifecycle.
• Develop and maintain technical documentation, procedures, runbooks, and knowledge base resources.
• Communicate project updates, incident resolutions, and technical information to stakeholders across the organization.

Security, Compliance & Continuous Improvement

• Participate in IT security initiatives, audits, risk assessments, and compliance efforts.
• Support implementation of security best practices and organizational technology standards.
• Help identify opportunities to improve technology efficiency, reliability, security, and user experience.
• Provide mentorship and technical guidance to junior IT team members and service desk staff.
• Support special projects and other duties as assigned.

What You’ll Bring:

• Bachelor's degree in Information Technology, Computer Science, or a related field, or an equivalent combination of education and experience.
• 4-8 years of progressive IT support, systems administration, or infrastructure experience.
• Experience administering Microsoft 365 environments supporting 250+ users.
• Strong knowledge of Microsoft 365 technologies, including Exchange Online, SharePoint Online, Teams, Entra ID, and Intune.
• Experience managing endpoint deployment, patching, compliance, and device lifecycle management.
• Knowledge of Microsoft security and compliance features, including MFA, Conditional Access, DLP, and Purview.
• Experience troubleshooting hardware, software, networking, and cloud-based technologies.
• Understanding of backup, disaster recovery, and business continuity practices.
• Experience supporting enterprise business applications and end-user computing environments.
• Strong analytical and problem-solving skills with the ability to diagnose and resolve complex technical issues.
• Excellent customer service and communication skills with the ability to support both technical and non-technical users.
• Strong organizational skills with the ability to manage multiple priorities in a fast-paced environment.
• Demonstrated initiative, adaptability, and commitment to continuous learning.

Preferred Qualifications

• Microsoft 365 Certified: Administrator Expert, Modern Desktop Administrator Associate, or similar certifications.
• Experience with Microsoft Intune Endpoint Management.
• Experience supporting Microsoft Copilot and AI-enabled workplace technologies.
• Familiarity with Microsoft Purview compliance and governance solutions.
• Experience supporting Deltek Vantagepoint, Dynamics 365, or similar enterprise business platforms.
• Experience supporting multi-office organizations and distributed workforces.
• Knowledge of Azure cloud services and cloud administration best practices.

Why Work with Lerch Bates?

• Competitive compensation
• 100% Employee-Owned ESOP (company-funded retirement benefit that allows eligible employees to share in the company's long-term success)
• Health, dental, and vision insurance
• Paid time off (starting at 17 days annually)
• 10 paid holidays
• 401(k) with employer match
• Paid parental leave
• Professional development and tuition reimbursement
• Performance-based incentives and bonuses
• Employee assistance and wellness programs

Core Values

• Ownership
• Community
• Integrity
• Respect
• Optimism

Working Environment

This position is primarily performed in a professional office or remote office environment with regular use of computers and standard office equipment. Occasional travel for meetings, training, conferences, or company events may be required depending on business needs.

Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.

Physical Demands

This position requires prolonged periods of sitting while working at a computer, along with frequent use of hands and fingers for typing and operating office equipment.

Occasional standing, walking, bending, and lifting or carrying office materials weighing up to 20 pounds may be required.

Mental Demands

This position requires strong organizational, analytical, and communication skills. Employees must be able to prioritize multiple assignments, maintain attention to detail, meet deadlines, and adapt to changing business priorities.

The role requires sound judgment, professionalism, problem-solving abilities, confidentiality, and effective collaboration with colleagues, clients, and external partners.

Employment is contingent upon the successful completion of a pre-employment background check and drug test. The drug test includes screening for marijuana, regardless of state or local laws permitting its use.

A conditional offer of employment will be rescinded if a candidate fails either the background check or the drug test. This requirement is mandated by federal regulations applicable to our government contracting obligations.

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, marital status, or any other characteristic protected by law.