Systems Administrator

Ruby+Suede; Savage (MN); Hybrid; USD 95,000 - 125,000; Full time

Benefits offered by this job

Competitive Salary starting $95,000–$-

Health Insurance

Unlimited Paid Time Off

Great culture

Job summary

Highmark Companies is seeking a senior IT leader to own and operate our entire IT environment across six divisions in the south metro. You will shape architecture, security, and operations, working with the IT Manager on strategy and budget.

Hybrid role based in Savage, MN with occasional on-site visits; you’ll guide deployment, monitoring, incident response, and vendor relationships to keep systems secure and reliable for all users.

Qualifications

• 5+ years in systems administration or IT infrastructure
• Administrator-level Microsoft 365 experience — Exchange Online, SharePoint, Teams, Entra ID, Intune, Defender
• Strong Windows Server and networking background: routing, switching, firewalls, VPN, VLANs, DNS, DHCP
• Track record leading infrastructure or security projects independently
• Working knowledge of a security framework (CIS Controls, NIST CSF, or similar)
• Backup and disaster recovery administration and testing
• Ability to make real decisions — architecture, vendor selection, spend priorities
• Ability to explain technical issues to field crews, staff, and executives

Responsibilities

• Full Entra ID and Microsoft 365 tenant administration — Exchange Online, SharePoint, OneDrive, Teams, Defender, Intune
• User provisioning, permissions, conditional access, and MFA administration
• Microsoft licensing management and renewal planning
• Intune device management across all workstations, laptops, and mobile devices
• Full device lifecycle: purchasing, imaging, deployment, shipping to field staff, end-of-life replacement
• IT asset register, warranty tracking, and refresh planning
• Corporate mobile account administration and networked print support
• Own the network: wireless, VLANs, DHCP, DNS, routing, and switching across every site
• Firewall administration, policy management, and VPN configuration
• Azure server infrastructure and on-premises server administration
• Infrastructure monitoring, alert response, and a seven-day patch policy
• Lead infrastructure projects independently — migrations, upgrades, and new-site standups
• Execute CIS Implementation Group 3 security remediation roadmap
• Triage SOC alerts alongside our managed detection and response partner
• Lead incident response end to end: detection, containment, remediation, documentation
• Run company-wide phishing simulation and security awareness training
• Own backups and disaster recovery, including validated test restores
• Build and maintain IT documentation, runbooks, and configuration standards
• Draft and maintain IT policy
• Deliver IT onboarding and training for new hires
• Evaluate new software and platforms as the business grows
• Manage hardware, ISP, and software vendor relationships
• Partner with the Operations Finance Manager on IT budget and capital refresh planning

Skills

5+ years systems administration

Microsoft 365 admin

Windows Server networking

Security project leadership

Backup and disaster recovery

Architecture decision making

Vendor management

Communication to stakeholders

Job description

Manage, oversee, and own the entire IT environment for Highmark Companies. We are building out our internal IT team, and we're hiring the senior technical person who can run and troubleshoot it. This isn't a role where you manage one slice of the stack, you'll run the whole environment: approximately 150 workstations, 11+ servers, and six operating divisions across the south metro.

You'll work directly with our IT Manager, who handles strategy and budget. You'll own how it actually gets built, secured, and kept running. If you've been waiting for a role where your decisions are the decisions, this is it.

Location: Hybrid remote - occasional on site work required in Savage, MN

What Highmark Companies offers

• Competitive Salary, starting between $95,000.00 and $125,000.00 DOE.
• Health Insurance — Company pays 100% of employee-only premium
• Unlimited Paid Time Off with Our Responsible Time Off Policy
• Great culture and team dynamic

Responsibilities

Microsoft 365 & Identity

Full Entra ID and Microsoft 365 tenant administration — Exchange Online, SharePoint, OneDrive, Teams, Defender, Intune

User provisioning, permissions, conditional access, and MFA administration

Microsoft licensing management and renewal planning

Endpoints & Devices

Intune device management across all workstations, laptops, and mobile devices

Full device lifecycle: purchasing, imaging, deployment, shipping to field staff, end-of-life replacement

IT asset register, warranty tracking, and refresh planning

Corporate mobile account administration and networked print support

Network & Infrastructure

Own the network: wireless, VLANs, DHCP, DNS, routing, and switching across every site

Firewall administration, policy management, and VPN configuration

Azure server infrastructure and on-premises server administration

Infrastructure monitoring, alert response, and a seven-day patch policy

Lead infrastructure projects independently — migrations, upgrades, and new-site standups

Security & Continuity

Execute our CIS Implementation Group 3 security remediation roadmap

Triage SOC alerts alongside our managed detection and response partner

Lead incident response end to end: detection, containment, remediation, documentation

Run company-wide phishing simulation and security awareness training

Own backups and disaster recovery, including validated test restores

Documentation & Business Partnership

Build and maintain IT documentation, runbooks, and configuration standards

Draft and maintain IT policy

Deliver IT onboarding and training for new hires

Evaluate new software and platforms as the business grows

Manage hardware, ISP, and software vendor relationships

Partner with the Operations Finance Manager on the IT budget and capital refresh planning

Working Conditions

This role works in a hybrid, remote-friendly environment, with required & occasional visits to our Savage office.

The incumbent should be able to lift and position equipment up to 50 pounds and occasionally climb, kneel, or crawl to reach network equipment and cabling, with or without reasonable accommodation.

Some work may fall outside standard hours for maintenance windows, outages, and security incidents.

About Highmark Companies

Highmark Companies is a family of six businesses spanning residential construction, home services, exteriors, restoration, custom cabinetry, and interior design — Highmark Builders, Highmark Home Services, Exteriors by Highmark, Restorations by Highmark, Christian Brothers Cabinets, and Ruby + Suede. We're headquartered in Savage, Minnesota.

Highmark Companies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity, marital status, familial status, status with regard to public assistance, membership or activity in a local human rights commission, disability, age, genetic information, veteran or military status, or any other characteristic protected by law.

We provide reasonable accommodations to qualified individuals with disabilities throughout the application process. Contact Human Resources to request an accommodation.

Requirements

Qualifications

Required

5+ years in systems administration or IT infrastructure, including 2+ years operating with real independent responsibility for an environment

Administrator-level Microsoft 365 experience — Exchange Online, SharePoint, Teams, Entra ID, Intune, Defender (configuration and governance, not end-user support)

Strong Windows Server and networking background: routing, switching, firewalls, VPN, VLANs, DNS, DHCP, multi-site troubleshooting

Track record leading infrastructure or security projects independently, start to finish

Working knowledge of a security framework (CIS Controls, NIST CSF, or similar), including hands-on remediation work

Backup and disaster recovery administration, including performing and validating test restores

Comfort making real decisions — architecture, vendor selection, security priorities, spend recommendations

Ability to explain technical issues clearly to field crews, production staff, and executives alike

Valid driver's license, acceptable driving record, ability & willingness to travel to our offices and job sites

Preferred

Previous role as the sole or lead IT resource for a company of 100+

Previous ownership of an internal IT function or moved an organization off an MSP

Construction, property services, manufacturing, or another multi-site, field-heavy industry

Palo Alto Networks firewall experience

Certifications such as CompTIA Security+ or Network+, Microsoft 365 Certified: Administrator Expert, Azure Administrator Associate, CCNA, or Palo Alto PCNSA/PCNSE

Certifications are a plus, not a requirement. If you've built the skills on the job, we want to talk.