Senior Systems Administrator

Trustees Of Thayer Academy; Braintree (MA); On-site; USD 113,000 - 117,000; Full time

Job summary

Trustees Of Thayer Academy seeks a Senior Systems Administrator to own the reliability, security, and lifecycle of on‑premises and cloud systems supporting academic and administrative operations. You will manage identity, servers, endpoints, backups, and SaaS integrations, while external specialists handle network architecture and infrastructure.

The role reports to the Director of IT and requires occasional after‑hours maintenance.

Qualifications

• 5+ years as a Systems Administrator in mixed Windows/macOS environments.
• Strong Windows Server and identity experience.
• Hands-on Entra ID / Azure AD experience.
• Virtualization and backup platform experience.
• Proven ability to own systems end-to-end.

Responsibilities

• Identity & Access: Administer Microsoft Entra ID (Azure AD), hybrid identity, and Conditional Access.
• Server & Platform Administration: Administer Windows Server and Linux systems (on-prem and cloud).
• Endpoint & Device Management: Support Jamf and Intune device platforms and baselines.
• Backup, DR, and Reliability: Administer backup platforms and test restores.
• Security Operations: Apply OS hardening and respond to security incidents; coordinate with vendors.
• SaaS & Application Support: Own backend administration for Google Workspace, Microsoft 365, and core platforms.
• Documentation & Process: Maintain runbooks and change management records.

Skills

Azure AD

Windows Server

macOS

Virtualization

Backup platforms

Duo MFA

Tools

VMware

Intune

Job description

Job Details

Job Location: Trustees of Thayer Academy - BRAINTREE, MA 02184 Salary Range: $113,022.00 - $116,978.00 Salary

Role Summary

The Senior Systems Administrator owns the reliability, security, and lifecycle of on-premises and cloud systems that support academic and administrative operations. This role focuses on identity, servers, endpoints, backups, security controls, and SaaS integrations. Network architecture and infrastructure responsibilities are handled by external specialists.

Reporting & Operating Model

• Reports to the Director of IT
• Works daily with external network and security consultants
• Primary point of contact for MSP and systems vendors
• Expected to perform maintenance and upgrades outside business hours when required

Primary Responsibilities

• Identity & Access
  • Administer Microsoft Entra ID (Azure AD), hybrid identity, and Conditional Access
  • Manage SSO integrations (SAML / OIDC)
  • Support MFA platforms (e.g., Duo)
  • Maintain RBAC, group strategy, and lifecycle automation
• Server & Platform Administration
  • Administer Windows Server and Linux systems (on-prem and cloud)
  • Manage virtualization platforms (VMware or equivalent)
  • Maintain directory, DNS, and DHCP services
  • Perform patching, upgrades, and lifecycle planning
• Endpoint & Device Management
  • Support Jamf and Intune device platforms
  • Integrate device identity with authentication systems
  • Maintain macOS and Windows configuration baselines and compliance
• Backup, DR, and Reliability
  • Administer backup platforms (Veeam, Druva, or equivalent)
  • Test restores and document recovery procedures
  • Maintain disaster recovery runbooks and system dependencies
• Security Operations (Non-Network)
  • Apply OS-level hardening and patching
  • Respond to endpoint and server security incidents
  • Support audits, logging, and compliance controls
  • Coordinate with security vendors and consultants
• SaaS & Application Support
  • Own backend administration for Google Workspace, Microsoft 365, Blackbaud, and core platforms
  • Maintain service integrations and provisioning flows
  • Troubleshoot authentication, sync, and access issues
• Documentation & Process
  • Maintain system documentation and diagrams
  • Create operational runbooks and escalation procedures
  • Support change management and configuration tracking

Qualifications

Required Qualifications

• 5+ years as a Systems Administrator in mixed Windows/macOS environments
• Strong Windows Server and identity experience
• Hands-on Entra ID / Azure AD experience
• Virtualization and backup platform experience
• Proven ability to own systems end-to-end

Strongly Preferred

• Experience in K-12 or higher education
• Intune administration
• Hybrid identity migrations
• SaaS-heavy environments with limited on-prem footprint
• Ability to work independently without a large internal IT team
• Familiarity with advanced networking concepts for coordination and troubleshooting

Compensation

$113,022 - $116,978

Application Information

Equal Opportunity Act: Thayer Academy is an equal opportunity employer. The Academy complies with and adheres to all state and federal anti-discrimination laws with respect to its employment practices. Thayer Academy does not discriminate against any employee or applicant for employment on the basis of race, color, religion, gender, sexual orientation, gender identity and expression, national origin or ancestry, age, or disability, or any other category protected under state or federal law. This policy extends to recruiting, hiring, compensation, benefits, assignment, working conditions, promotions, transfers, termination, re-employment, education, tuition assistance, employee treatment, and all other terms, conditions, and privileges of employment. All employment-related decisions are made on a nondiscriminatory basis so as to further the principle of equal employment opportunity.

Americans with Disabilities Act: Thayer Academy complies with all aspects of the Americans with Disabilities Act (ADA) and state disability laws. This means that we will not discriminate against qualified individuals with a disability in any phase of the employment relationship including application for employment, hiring, promotions and/or advancement opportunities, termination, compensation, training, and any other conditions or privileges of employment.