IT System Administrator

Toa; Brentwood (TN); On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Paid time off

401(k) with company match

Job summary

Tennessee Orthopaedic Alliance (TOA) is seeking an IT System Administrator to manage on-premises and cloud servers, Microsoft 365 hybrid environment, identity and access management, and the enterprise voice platform. The role includes server administration, Azure Virtual Desktop, AD, Intune, and security/vulnerability tasks across multiple locations.

HealthcareHIPAA experience is preferred. Ideal candidates will have 3+ years in server administration, strong communication skills, and a

Qualifications

• Associates degree in computer science or equivalent work experience required or preferred.
• 3 years server administration experience preferred.
• Experience with Active Directory and Group Policy required.
• Experience with Microsoft Intune, Azure Virtual Desktop, or Entra ID preferred.
• Experience in healthcare environment and HIPAA requirements preferred.

Responsibilities

• Administer physical and virtual servers, including storage allocation, OS patching, software configuration, and lifecycle management.
• Configure Azure Virtual Desktop; ensure host pools availability and updates.
• Monitor systems; respond to issues; perform backups and recovery testing.
• Maintain documentation and standard operating procedures.
• Administer Active Directory: users, groups, devices, and auditing.
• Manage Microsoft 365 environment: users, groups, licensing.

Education

Associates in CSCI preferred

Job description

Tennessee Orthopaedic Alliance is the largest orthopaedic surgery group in Nashville and Middle Tennessee. TOA concentrates on the diagnosis and treatment of disorders and injuries of the musculoskeletal system which allow our patients to live their best life. Ninety plus years later we are advancing the practice of orthopaedic surgery throughout the state.

There are a number of reasons why TOA is an employer of choice; here are a few of them:

• Stability - TOA has been in Middle Tennessee since 1926 and has expanded to 35 locations.
• Impact - TOA's team members use our careers -- whether in our clinics or our business office -- to make a positive difference in the community by building relationships and helping patients live their best life.
• Work Environment - The TOA team focuses on fostering an excellent working environment; one of positivity, collaboration, job satisfaction, and engagement.
• Total Rewards - TOA offers competitive salaries based on the current Middle Tennessee wage market, plus a comprehensive suite of benefits, including Medical, Dental, Paid Time Off, and more. Our 401(k) plan provides a company match, safe harbor match and profit sharing match to go along with your contributions.

Here is an overview of the IT System Administrator role: They are responsible for TOA's on-premises and cloud server environment, Microsoft 365 hybrid tenant, identity and access management, and the enterprise voice platform. Installs and maintains server hardware and software, and troubleshoots issues with programs, slowness, and outages. Remediates security vulnerabilities and maintains system backups and recovery testing. Completes assignments as part of new projects, upgrades, break/fix, or other initiatives as directed. Cross trains and backfills the Network Administrator. Specifically, they will:

Server and Systems Administration

• Administer physical and virtual servers, including storage allocation, operating system patching, software configuration, and lifecycle management
• Administer Azure Virtual Desktop, ensuring availability of host pools and that scheduled reboots and updates complete successfully
• Configure monitoring software to ensure issues are addressed proactively, and respond to correct issues
• Maintain all server grade equipment in switch closets at locations
• Ensure system backups complete successfully and perform restores and routine recovery testing as needed
• Maintain accurate technical documentation and standard operating procedures

Identity, Access, and Microsoft 365

• Administer Active Directory: manage users, groups, and devices; audit and clean up stale accounts; and maintain overall directory health using tools such as PingCastle
• Administer the Microsoft 365 environment, including users, groups, applications, and license assignment and reclamation
• Build and maintain single sign-on integrations with third party applications, including AD group mapping, SCIM provisioning, claims, and exchange of SSO values with vendors
• Administer Microsoft Intune in partnership with the desktop support team, including applications, compliance and configuration policies, and device enrollment
• Manage file share and folder permissions, including security groups, read/write access, and periodic access reviews and cleanup
• Administer self-service password and account management tooling, including certificate renewal, user enrollment assistance, and policy configuration
• Maintain Active Directory auditing and reporting tools, including data connectivity, account re-authentication, and license installation

Telecom and Voice

• Administer the cloud VoIP phone system, including call routing, menus and options, call groups, and extension management
• Maintain phone schedules across all locations, including rolling phones, holiday schedules, and unplanned closures
• Administer voicemail transcription services, including adding and removing users
• Configure and support overhead paging systems at existing and new care center locations, coordinating break/fix work with the vendor
• Submit and track spam and robocall mislabeling removal requests for TOA phone numbers

Security and Vulnerability Management

• Remediate findings from routine vulnerability and threat management scans, track issues to closure, and participate in recurring review calls with our security partner
• Apply security patches and hardening standards across the server environment in support of HIPAA and organizational compliance requirements
• Cross train with the Network Administrator on both networking and server administration to better support the team as a whole
• Coordinate with third party vendors and managed service partners on escalations, projects, and new site builds
• Provide escalation support to the help desk and desktop support team as needed

Requirements

Here are the qualifications and requirements our successful candidate will possess:

EDUCATION AND EXPERIENCE

• Associates in CSCI preferred, equivalent 4+ years' experience accepted
• 3 years server administration experience preferred
• Experience with Active Directory and Group Policy required
• Experience with Microsoft Intune, Azure Virtual Desktop, or Entra ID preferred
• Experience supporting a healthcare environment and HIPAA requirements preferred
• Strong analytical/technical ability
• Excellent communications skills (i.e. ability to interact effectively with end users, physicians, management and co-workers)
• Strong sense of urgency and responsiveness to others while staying focused on the issues at hand
• Working knowledge of single sign-on concepts, including SAML, SCIM provisioning, and claims mapping
• Familiarity with vulnerability management and remediation workflows
• Comfortable with data migrations between systems
• Active Directory Group Policy
• Experience with domain merges/collapse would be a plus
• Comfortable scripting for administrative tasks (PowerShell preferred)

TOA is an equal opportunity employer. TOA conducts drug screens and background checks on applicants who accept employment offers.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.