SAP System Administrator

Pond Lehocky Giordano Inc.; Philadelphia (Philadelphia County); On-site; USD 90,000 - 110,000; Full time

Job summary

Pond Lehocky Giordano is seeking a Systems Administrator to own day-to-day administration of our hybrid Microsoft 365 / Exchange Online environment, Entra ID, and on-premises Active Directory. You will manage HPE servers, SonicWall firewalls, and automation through PowerShell, with occasional travel to other offices.

You’ll collaborate with the Director of IT Operations, handle Tier 2/3 escalations, and contribute to end-to-end projects across multiple locations.

Qualifications

• 2–4 years of hands-on systems administration experience.
• Working knowledge of Microsoft 365 administration, including Exchange Online.
• Experience administering Active Directory and Group Policy in a Windows Server environment.
• Working knowledge of Entra ID: user and group management, MFA, and hybrid identity sync.
• Familiarity with basic Azure fundamentals (VMs, storage, networking).
• Understanding of DNS and DHCP, with the ability to troubleshoot name resolution.
• Working knowledge of HPE servers (ProLiant, iLO) or comparable enterprise server hardware.
• Working knowledge of SonicWall firewalls or comparable next-gen firewall platforms: rules, NAT, and VPN.
• Comfort with PowerShell for day-to-day administration.
• Strong troubleshooting skills and clear communication with non-technical users.
• Ability to travel occasionally between firm office locations and work occasional after-hours maintenance windows

Responsibilities

• Administer Microsoft 365 tenant services including Exchange Online, Teams, SharePoint, and OneDrive
• Support the hybrid Exchange environment: mailbox provisioning, shared mailboxes, permissions, distribution groups, and mail flow troubleshooting
• Manage licensing, user onboarding/offboarding, and tenant-level settings
• Maintain on-premises Active Directory: users, groups, OUs, service accounts, and AD health
• Manage Entra ID Connect / Cloud Sync and troubleshoot hybrid identity and device join issues
• Administer MFA, Conditional Access policies, and security group-based access
• Design, deploy, and troubleshoot Group Policy Objects
• Support Azure resources such as VMs, storage, networking, and backups
• Assist with Intune device enrollment, compliance, and configuration policies
• Administer HPE ProLiant servers: firmware and driver updates via iLO and SPP, hardware monitoring, and vendor RMA coordination
• Maintain Windows Server roles including DNS, DHCP, and file services
• Manage internal and external DNS records and resolve name resolution issues
• Administer SonicWall firewalls: access rules, NAT, site-to-site and SSL VPN, firmware updates, and security services
• Write and maintain PowerShell scripts to automate routine administration
• Patch servers and monitor backups, alerts, and system health
• Serve as Tier 2/3 escalation for the help desk
• Document systems, procedures, and changes
• Participate in projects across multiple office locations, with occasional after-hours maintenance windows

Skills

Microsoft 365 admin

Exchange Online

Active Directory

Group Policy

Entra ID

Azure basics

DNS & DHCP

HPE ProLiant

SonicWall firewalls

PowerShell

Troubleshooting

Travel availability

Tools

Datto RMM

ESET

Intune

Job description

Location: Philadelphia, PA (on-site with travel to other firm offices)

Reports to: Director of IT Operations

Type: Full-time, exempt

Pond Lehocky Giordano is seeking a Systems Administrator to help run and secure the infrastructure behind a multi-office law firm. You'll own day-to-day administration of our hybrid Microsoft 365 / Exchange Online environment, Entra ID and on-premises Active Directory, HPE server infrastructure, and SonicWall firewalls.

This role is a step above entry level. You've already handled tickets and supported users; now you want to own systems, build automation, and take on projects end to end. You'll work closely with the Director of IT Operations and serve as an escalation point for the help desk.

Key responsibilities:

Microsoft 365 and Exchange

• Administer Microsoft 365 tenant services including Exchange Online, Teams, SharePoint, and OneDrive
• Support the hybrid Exchange environment: mailbox provisioning, shared mailboxes, permissions, distribution groups, and mail flow troubleshooting
• Manage licensing, user onboarding/offboarding, and tenant-level settings

Identity and access (Entra ID and Active Directory)

• Maintain on-premises Active Directory: users, groups, OUs, service accounts, and AD health
• Manage Entra ID Connect / Cloud Sync and troubleshoot hybrid identity and device join issues
• Administer MFA, Conditional Access policies, and security group-based access
• Design, deploy, and troubleshoot Group Policy Objects

Azure and endpoint

• Support Azure resources such as VMs, storage, networking, and backups
• Assist with Intune device enrollment, compliance, and configuration policies

Infrastructure and network

• Administer HPE ProLiant servers: firmware and driver updates via iLO and SPP, hardware monitoring, and vendor RMA coordination
• Maintain Windows Server roles including DNS, DHCP, and file services
• Manage internal and external DNS records and resolve name resolution issues
• Administer SonicWall firewalls: access rules, NAT, site-to-site and SSL VPN, firmware updates, and security services

Operations

• Write and maintain PowerShell scripts to automate routine administration
• Patch servers and monitor backups, alerts, and system health
• Serve as Tier 2/3 escalation for the help desk
• Document systems, procedures, and changes
• Participate in projects across multiple office locations, with occasional after-hours maintenance windows

Required qualifications:

• 2–4 years of hands-on systems administration experience
• Working knowledge of Microsoft 365 administration, including Exchange Online
• Experience administering Active Directory and Group Policy in a Windows Server environment
• Working knowledge of Entra ID: user and group management, MFA, and hybrid identity sync
• Familiarity with basic Azure fundamentals (VMs, storage, networking)
• Understanding of DNS and DHCP, with the ability to troubleshoot name resolution
• Working knowledge of HPE servers (ProLiant, iLO) or comparable enterprise server hardware
• Working knowledge of SonicWall firewalls or comparable next-gen firewall platforms: rules, NAT, and VPN
• Comfort with PowerShell for day-to-day administration
• Strong troubleshooting skills and clear communication with non-technical users
• Ability to travel occasionally between firm office locations and work occasional after-hours maintenance windows

Preferred qualifications:

• Experience in a law firm or other professional services environment
• Experience with hybrid Exchange (on-premises plus Exchange Online)
• Experience with Conditional Access, Intune, or Hybrid Entra Join
• Exposure to RMM and endpoint security tools (e.g., Datto RMM, ESET)
• Familiarity with Teams Phone or Direct Routing
• Certifications such as Microsoft 365 Administrator (MS-102), Azure Administrator (AZ-104), Identity and Access Administrator (SC-300), CompTIA Network+/Security+, or SonicWall SNSA

Compensation:

Salary range: $90,000 – $110,000 base, depending on experience and certifications.

• Full-time, exempt; on-site in Philadelphia with occasional travel to other firm offices
• Occasional after-hours and weekend work for maintenance windows and urgent issues

Pond Lehocky Giordano is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected status.