Systems Administrator

See's Candies, Inc.; Carson (CA); On-site; USD 56,000 - 77,000; Full time

Benefits offered by this job

401(k) eligibility

Paid time off

Job summary

See's Candies in Carson, CA is seeking a Systems Administrator to manage endpoint security, patching, and enterprise client administration for 1,000+ Windows endpoints.

You will administer Intune, Active Directory/Azure AD, and Windows imaging, ensuring secure, compliant operations while partnering with IT teams to support a growing technology environment.

Qualifications

• Three+ years patch management with an enterprise toolset.
• Three+ years endpoint security and threat remediation experience.
• Three+ years Windows OS administration and management.

Responsibilities

• Manage and maintain endpoint security solutions across 1,000+ users.
• Review, test, and deploy OS updates and patches enterprise-wide.
• Administer Microsoft Intune and device enrollment across OSs.
• Prepare and deploy standardized Windows images for environments.
• Administer Active Directory and Entra ID with GPOs and access control.
• Administer enterprise email environments and user accounts.
• Monitor wired/wireless network access and resolve issues.
• Prepare security, patching, and inventory reports; document procedures.
• Collaborate with IT teams to improve client management and security.

Skills

Endpoint security

Patch management

Microsoft Intune

Azure AD / Entra ID

Windows imaging

Win32/MSI deployment

Intune enrollment

Tools

Microsoft Intune

Windows imaging

Active Directory

Job description

## Systems AdministratorApply: Carson, CA: Full time: Posted 15 Days Ago: JR107158**Work is Sweet!**'Quality without Compromise' is not just a motto at See’s Candies. It is the most important ingredient in our recipe for success. See’s Candies has been in business since 1921 and maintains a reputation for producing the highest quality candy and providing superior customer service.See’s is a leader in the confectionery industry with over 250 retail shops across the USA, a growing e-commerce business, and expanding opportunities internationally. We are seeking friendly, enthusiastic individuals who are passionate about helping us grow and thrive in our second century.**Job Description Summary:**Position Objective: Responsible for endpoint security, patch management, and enterprise client administration across an environment of 1,000+ users and Windows endpoints. The position monitors and remediates endpoint security threats and events; ensures computers remain patched, secure, compliant, and protected; and develops and supports systems required for reliable and effective technology operations. The pay range for this position is expected to be $40.77-$55.96 an hour; however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience.**Job Description:****POSITION RESPONSIBILITIES:** **Endpoint Security and Threat Management**• Manage and maintain endpoint security solutions, including firewall, antivirus, endpoint protection, disk encryption, multifactor authentication, and related security technologies.• Monitor, investigate, remediate, document, and report endpoint security threats, vulnerabilities, alerts, and protection-related events in a timely manner.• Ensure endpoints remain protected and compliant with company security standards and applicable requirements.**Patch Management and Software Deployment**• Review, test, and deploy operating system updates, security patches, software releases, and application revisions in a timely manner.• Package, test, deploy, update, and maintain Win32, MSI/PKG, driver, and other required software through enterprise endpoint management platforms.• Ensure Windows endpoints remain fully patched, secure, current, and operational.**Endpoint Management and Microsoft Intune Administration**• Administer Microsoft Intune and other client management platforms used to deploy and maintain applications, drivers, configuration profiles, compliance policies, and remediation scripts.• Troubleshoot device enrollment across supported operating systems, application detection and updates, device compliance, synchronization, and endpoint management issues.• Maintain an accurate and current inventory of managed clients, software, and device status within the client management platform.• Resolve issues within the client management environment and apply platform patches and upgrades to support smooth, efficient operations.**Windows Systems Administration and Imaging**• Administer and support Windows operating systems in an enterprise environment of 1,000+ users and endpoints.• Prepare, build, test, maintain, and deploy standardized Windows images for each operating environment.• Provide advanced troubleshooting and technical support for Windows client and endpoint management issues.**Directory Services and Identity Management**• Administer Active Directory and Microsoft Entra ID (Azure AD) in accordance with user provisioning, deprovisioning, security, and Group Policy guidelines.• Manage user and group access and support identity technologies, including single sign-on and multifactor authentication.**Email and Account Administration**• Administer the enterprise email environment, including provisioning, decommissioning, archiving, and maintaining email user accounts.• Perform account administration in accordance with organizational access, retention, and security requirements**Network Administration and Monitoring**• Support wired and wireless network administration, including installation, configuration, connectivity, and access control.• Monitor, investigate, and address network-related alerts and operational issues.**Reporting, Documentation, and Operational Excellence**• Prepare endpoint security, compliance, patching, inventory, and other operational reports as required.• Develop, document, and maintain procedures for client management activities that align with operational requirements and recognize best practices.• Drive continuous improvement by identifying and implementing opportunities to enhance technology, innovation, security, service delivery, and departmental effectiveness.**Collaboration and Additional Responsibilities**• Collaborate with IT Support, IT Managers, and other technology teams to improve client management infrastructure, endpoint security, and operational effectiveness.• Work independently with limited direct supervision while communicating effectively with technical and nontechnical stakeholders.• Perform other duties and special projects as assigned by management.• Demonstrate commitment to the company’s core principles and workplace values, including diversity and inclusion **MINIMUM QUALIFICATIONS**• Minimum three years of patch management and software deployment experience using an enterprise-level management platform to patch and deploy software to multiple clients.• Minimum three years of endpoint security and protection experience using an enterprise-level platform to manage, protect, monitor, alert on, and remediate security vulnerabilities and threats.• Minimum three years of Windows operating system administration and management experience.• Minimum three years of Active Directory administration experience, preferably including Microsoft Entra ID (Azure AD), user provisioning, Group Policy, and security.• Minimum three years of experience using a client management application for endpoint protection and patch-level maintenance in an environment of 1,000+ Windows clients.• Minimum three years of Microsoft Intune experience, including deployment and maintenance of Win32 applications, MSI/PKG applications, drivers, configuration profiles, compliance policies, and remediation scripts.• Experience troubleshooting Intune enrollment across supported operating systems, application detection and updates, device compliance, and synchronization issues.• Experience or expertise with disk encryption, single sign-on, or multifactor authentication.• Minimum three years of Windows support experience, including preparing, building, and testing Windows images.• Strong analytical skills with demonstrated problem-solving ability.• Ability to communicate effectively and collaborate across teams.• Ability to work independently with limited direct supervision.• Proven ability to learn new technologies quickly and manage change efficiently, proactively, and positively. The total compensation package for this position may also include other elements, in addition to a full range of generous medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. *See's is an EOE See’s will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable local, state or federal law (including San Francisco Ordinance #131192 and Los Angeles Municipal Code 189.00).*Welcome to See's Candies where every career choice is as delightful as our candy! Whether you're a seasoned professional or just starting your journey, you've come to the right place to satisfy your career cravings. From crafting irresistible confections to spreading joy to customers, every role at See's Candies is a chance to make a difference and leave a lasting impression. Apply now and join our extraordinary team dedicated to making life a little sweeter, one chocolate at a time. Your next sweet adventure starts here!