IT Systems Administrator

Xterra Health; Salem (OH); Hybrid; USD 80,000 - 95,000; Full time

Benefits offered by this job

Unlimited PTO

401(k) employer match up to 4%

Medical, Dental & Vision: 75% premiums

Hybrid work arrangement

Job summary

Xterra Health in Salem, OH is seeking an IT Systems Administrator to own identity and endpoint management in a hybrid, full-time role. You’ll manage Entra ID, Intune, and device compliance while supporting a growing distributed workforce and maintaining HIPAA-aligned controls.

Initially you’ll pair with the Director on end-user support, then shift toward autonomous identity/endpoint ownership as the team expands, ensuring secure access and compliant operations.

Qualifications

• 2+ years of hands-on experience administering Microsoft Entra ID (Azure AD), Intune, and Microsoft 365 in a production environment.
• Solid understanding of identity and access management fundamentals: conditional access, MFA, RBAC, and lifecycle management.
• Experience with endpoint compliance and mobile device management in a Windows-first, cloud-first environment.
• Comfort working independently as the primary owner of a system, with strong documentation habits.

Responsibilities

• Administer Microsoft Entra ID: user and group lifecycle, role assignments, access reviews, and license management.
• Execute and maintain Conditional Access policies covering MFA and device compliance.
• Manage guest and contractor access.
• Own device provisioning and lifecycle through Intune and Autopilot, from enrollment through retirement.
• Maintain device compliance policies and monitor Defender for Endpoint alerts; triage and remediate vulnerabilities.
• Support a mixed device fleet across a distributed, hybrid workforce.
• Administer Exchange Online: mailbox management, distribution lists, shared mailboxes, and mail flow rules.
• Administer Teams: guest access, meeting policies, and app governance.
• Manage SharePoint site permissions and access through Entra ID security groups.
• Identify and implement opportunities to automate recurring identity and access tasks.

Skills

Entra ID (Azure AD)

Intune

Microsoft 365

Endpoint management

Job description

IT SYSTEMS ADMINISTRATOR
Digital Operations & Technology | Salem, OH (Hybrid) | Full-Time, Exempt

POSITION SUMMARY

Xterra Health supports veterans through every step of their disability claims process, operating as a HIPAA-regulated healthcare services organization with a modern, cloud-native Microsoft 365 environment supporting a growing, distributed workforce.

The IT Systems Administrator owns the day-to-day identity and endpoint management layer of that environment as the company scales. This is an individual-contributor role with real technical ownership: account lifecycle, device compliance, conditional access, and the day-to-day identity and endpoint work that keeps the environment secure and compliant. Early on, that also means pitching in on direct end-user support alongside the Director while the department builds out; the balance shifts more fully toward identity and endpoint ownership as headcount grows and dedicated support hires come on board.

KEY RESPONSIBILITIES

Identity & Access Management

• Administer Microsoft Entra ID: user and group lifecycle, role assignments, access reviews, and license management
• Execute and maintain Conditional Access policies covering MFA and device compliance
• Manage guest and contractor access

Endpoint Management

• Own device provisioning and lifecycle through Intune and Autopilot, from enrollment through retirement
• Maintain device compliance policies and monitor Microsoft Defender for Endpoint alerts, triaging and remediating vulnerabilities on a proactive schedule rather than reactively
• Support a mixed device fleet (Windows and macOS) across a distributed, hybrid workforce

Exchange Online & Teams Administration

• Administer Exchange Online: mailbox management, distribution lists, shared mailboxes, and mail flow rules
• Administer Microsoft Teams: guest access, meeting policies, and app governance

SharePoint Administration

• Manage SharePoint site permissions and access through Entra ID security groups
• Support site provisioning, structure, and lifecycle management as new department sites and content areas are added

Automation & Systems Integration

• Identify and implement opportunities to automate recurring identity and access administration tasks

Security & Compliance Support

• Operate within HIPAA-aligned controls for systems handling electronic Protected Health Information (ePHI)
• Support access reviews, audit requests, and documentation tied to the compliance program

Direct End-User Support

• Provide hands-on Tier 1/2 support alongside the Director while the department builds out; tickets, account issues, and device troubleshooting are part of this role in its early stages
• Expect this share of the role to decrease over time as dedicated Help Desk hires come online and take on front-line ticket volume

Collaboration

• Serve as the technical escalation point for identity- and device-related issues beyond front-line support
• Document configurations, runbooks, and standard procedures as the environment grows

QUALIFICATIONS

Required

• 2+ years of hands-on experience administering Microsoft Entra ID (Azure AD), Intune, and Microsoft 365 in a production environment
• Solid understanding of identity and access management fundamentals: conditional access, MFA, RBAC, and lifecycle management
• Experience with endpoint compliance and mobile device management in a Windows-first, cloud-first environment
• Comfort working independently as the primary owner of a system, with strong documentation habits
• Clear written communication; a meaningful part of this role is explaining access and security decisions to non-technical stakeholders
• Willingness to provide direct end-user support as needed while the team is small

Preferred

• Experience in a healthcare, financial, or other regulated industry with HIPAA or similar compliance requirements
• Familiarity with Microsoft Defender for Endpoint and Microsoft Purview
• PowerShell scripting for administration, reporting, or automation
• Microsoft certifications (MD-102, MS-102, SC-300, or equivalent)

WHY THIS ROLE

This is a small, lean IT department where your work has direct, visible impact. You'll have real ownership of a system that matters, room to shape how it's built as the company roughly triples in size over the next year, and a clear, non-overlapping scope: identity and endpoints are yours.

COMPENSATION & BENEFITS

• Annual Salary: $80,000–$95,000, commensurate with experience
• Medical, Dental & Vision: Eligible the first of the month following 30 days; Xterra Health covers 75% of employee premiums
• PTO: Unlimited, in line with Xterra Health's salaried employee PTO policy
• 401(k): 100% employer match up to 4% of eligible compensation; immediate vesting; enrollment the first of the month following 90 days