Systems Administrator

Sanctuary Wealth; Indianapolis (IN); Hybrid; USD 80,000 - 100,000; Full time

Job summary

Sanctuary Wealth is seeking a Systems Administrator to support, secure, and standardize Microsoft cloud environments across 100+ client and partner tenants. The role involves identity management, endpoint control, and governance in a regulated financial services setting.

The successful candidate will design Conditional Access, manage Intune/Autopilot, govern SharePoint Online, apply Purview DLP and retention, and collaborate with IT engineers to ensure reliable operations.

Qualifications

• 5+ years of systems or cloud administration experience, including 3+ years of hands‑on Microsoft 365 administration in production environments.
• Deep experience with Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
• Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
• Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
• Strong documentation, collaboration, communication, prioritization, and change‑management skills.

Responsibilities

• Administer Microsoft 365 and Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.
• Design, test, deploy, and maintain Conditional Access policies covering MFA, device compliance, and risk‑based access.
• Manage Intune enrollment, Windows Autopilot, device configuration, compliance policies, and endpoint security baselines.
• Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls.
• Configure and maintain Purview sensitivity labels, data loss prevention, retention, auditing, and eDiscovery; partner with Compliance.
• Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; address oversharing risks before rollout.
• Monitor configuration drift and maintain runbooks and documentation; coordinate controlled deployments.
• Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale.
• Investigate suspicious sign‑ins, account compromise, and endpoint/security alerts; assist with remediation and security reviews.
• Troubleshoot cloud, endpoint, identity, and collaboration issues; collaborate with help desk and vendors to resolve root causes.
• Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs.
• Participate in technology initiatives, migrations, and service improvements, following change‑management practices.

Skills

Microsoft 365 administration

Security governance

Troubleshooting

Documentation

Collaboration

Education

Bachelor’s degree in technology

Tools

PowerShell

Microsoft Graph

Intune

Entra ID

SharePoint Online

Purview

GDAP

Microsoft Defender

Azure

Job description

Systems Administrator

Description

Systems Administrator

Reports To: Head of IT Engineering | Location: Indianapolis, IN | Work Arrangement: Full-time, hybrid

Compensation: See details below

Role Summary

The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands‑on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment.

Essential Duties And Responsibilities

• Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication.
• Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk‑based access, and session controls; use report‑only mode and pilot groups to reduce disruption.
• Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access.
• Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations.
• Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence.
• Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data‑protection risks before rollout.
• Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments.
• Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation.
• Investigate suspicious sign‑ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews.
• Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes.
• Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned.
• Participate in technology initiatives, migrations, and service improvements, following change‑management practices and communicating impacts to stakeholders.

Required Qualifications

• 5+ years of systems or cloud administration experience, including 3+ years of hands‑on Microsoft 365 administration in production environments.
• Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP.
• Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules.
• Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments.
• Strong documentation, collaboration, communication, prioritization, and change‑management skills.

Preferred Qualifications

• Experience with Microsoft 365 Copilot administration, readiness, or governance.
• Multi‑tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools.
• Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure.
• Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks.
• Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401.
• Bachelor’s degree in a technology‑related field or an equivalent combination of education, certifications, and relevant professional experience.

Salary Description

$80,000 - $100,000