Systems Administrator

Sanctuary Wealth Group LLC; Indianapolis (IN); Hybride; USD 90 000 - 120 000; Plein temps

Résumé du poste

Sanctuary Wealth Group LLC is seeking a Systems Administrator to support, secure, and standardize Microsoft cloud environments across 100+ client and partner-firm tenants. This hands-on role manages identity, access, endpoint management, and data protection within a regulated financial services setting.

You will design and implement Conditional Access, manage Intune and device policies, govern SharePoint Online/OneDrive, and apply Purview labels and DLP.

Qualifications

• 5+ years of systems or cloud administration experience, including 3+ years of hands-on Microsoft 365 administration in production environments.
• Depth in Entra ID and Conditional Access, Intune management, SharePoint Online governance, and Purview DLP.
• Strong PowerShell skills with Microsoft Graph and M365 admin modules.
• Ability to identify security and governance gaps and implement changes safely.
• Strong documentation, collaboration, and change-management skills.

Responsabilités

• Administer M365 and Entra ID across multiple tenants, including identities and permissions.
• Design and deploy Conditional Access policies with MFA and risk-based controls.
• Manage Intune enrollment, Autopilot, device configuration, and compliance policies.
• Govern SharePoint Online and OneDrive sharing, permissions, and lifecycle controls; support migrations.
• Configure Purview sensitivity labels, DLP, retention, and eDiscovery; coordinate with Compliance.
• Support Copilot licensing, readiness, governance, and risk remediation prior to rollout.

Connaissances

Microsoft 365 admin

Entra ID

Intune device management

PowerShell

Documentation

Formation

Bachelor’s degree in technology or related field

Outils

Microsoft Graph

GDAP

SharePoint Online

Microsoft Defender

Description du poste

Description

Systems Administrator

Reports To: Head of IT Engineering | Location: Indianapolis, IN | Work Arrangement: Full-time, hybrid

Compensation: See details below

ROLE SUMMARY

The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands‑on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.
• Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk‑based access, and session controls; use report‑only mode and pilot groups to reduce disruption.
• Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.
• Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.
• Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.
• Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data‑protection risks before rollout.
• Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.
• Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.
• Investigate suspicious sign‑ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.
• Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.
• Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.
• Participate in technology initiatives, migrations, and service improvements, following change‑management practices and communicating impacts to stakeholders.

REQUIRED QUALIFICATIONS

• 5+ years of systems or cloud administration experience, including 3+ years of hands‑on Microsoft 365 administration in production environments.
• Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
• Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
• Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
• Strong documentation, collaboration, communication, prioritization, and change‑management skills.

PREFERRED QUALIFICATIONS

• Experience with Microsoft 365 Copilot administration, readiness, or governance.
• Multi‑tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.
• Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.
• Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.
• Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.
• Bachelor’s degree in a technology‑related field or an equivalent combination of education, certifications, and relevant professional experience.