Systems Administrator

Highmark Companies; Savage (MN); Hybrid; USD 95,000 - 125,000; Full time

Benefits offered by this job

Health insurance

Health Savings Account

Dental

Vision

Life Insurance

Short-Term & Long-Term Insurance

401K + 3% employer contribution

8 Paid Holidays

Unlimited Paid Time Off

Profit Sharing

Employee Referral Program

Employee Discount Program

Great culture and team dynamic

Job summary

Highmark Companies is seeking a Systems Administrator to own and operate the full IT environment for 150 workstations, 11+ servers across six divisions. Hybrid remote work with occasional Savage, MN on-site visits.

You will work with the IT Manager to build, secure, and maintain the systems, including Microsoft 365, identity, and Azure infrastructure. This is a decisive, hands-on senior role with broad scope.

Qualifications

• 5+ years in systems administration or IT infrastructure
• Administrator-level Microsoft 365 experience — Exchange Online, SharePoint, Teams, Entra ID, Intune, Defender
• Strong Windows Server and networking background: routing, switching, firewalls, VPN, VLANs, DNS, DHCP

Responsibilities

• Own Microsoft 365 & Identity administration across the environment (Exchange Online, SharePoint, OneDrive, Teams, Defender, Intune)
• Manage Intune device management across all workstations and mobile devices
• Lead network and infrastructure tasks including firewall and VPN configuration, Azure servers, and on-prem servers

Skills

System administration

Security

Decision making

Communication

Tools

Microsoft 365 Admin

Entra ID

Intune

Exchange Online

SharePoint

Teams

Azure

Defender

Firewall

Job description

Systems Administrator

Manage, oversee, and own the entire IT environment for Highmark Companies. We are building out our internal IT team, and we're hiring the senior technical person who can run and troubleshoot it. This isn't a role where you manage one slice of the stack, you'll run the whole environment: approximately 150 workstations, 11+ servers, and six operating divisions across the south metro.

Description

You'll work directly with our IT Manager, who handles strategy and budget. You'll own how it actually gets built, secured, and kept running. If you've been waiting for a role where your decisions are the decisions, this is it.

Location: Hybrid remote - occasional on site work required in Savage, MN

What Highmark Companies Offers

• Competitive Salary, starting between $95,000.00 and $125,000.00 DOE.
• Health Insurance — Company pays 100% of employee-only premium
• Health Savings Account
• Dental
• Vision
• Life Insurance
• Short-Term & Long-Term Insurance
• 401K + 3% employer contribution
• 8 Paid Holidays
• Unlimited Paid Time Off with Our Responsible Time Off Policy
• Profit Sharing
• Paid Employee Referral Program
• Employee Discount Program
• Great culture and team dynamic

Responsibilities

Microsoft 365 & Identity

• Full Entra ID and Microsoft 365 tenant administration — Exchange Online, SharePoint, OneDrive, Teams, Defender, Intune
• User provisioning, permissions, conditional access, and MFA administration
• Microsoft licensing management and renewal planning

Endpoints & Devices

• Intune device management across all workstations, laptops, and mobile devices
• Full device lifecycle: purchasing, imaging, deployment, shipping to field staff, end-of-life replacement
• IT asset register, warranty tracking, and refresh planning
• Corporate mobile account administration and networked print support

Network & Infrastructure

• Own the network: wireless, VLANs, DHCP, DNS, routing, and switching across every site
• Firewall administration, policy management, and VPN configuration
• Azure server infrastructure and on-premises server administration
• Infrastructure monitoring, alert response, and a seven-day patch policy
• Lead infrastructure projects independently — migrations, upgrades, and new-site standups

Security & Continuity

• Execute our CIS Implementation Group 3 security remediation roadmap
• Triage SOC alerts alongside our managed detection and response partner
• Lead incident response end to end: detection, containment, remediation, documentation
• Run company-wide phishing simulation and security awareness training
• Own backups and disaster recovery, including validated test restores

Documentation & Business Partnership

• Build and maintain IT documentation, runbooks, and configuration standards
• Draft and maintain IT policy
• Deliver IT onboarding and training for new hires
• Evaluate new software and platforms as the business grows
• Manage hardware, ISP, and software vendor relationships
• Partner with the Operations Finance Manager on the IT budget and capital refresh planning

Working Conditions

• This role works in a hybrid, remote-friendly environment, with required & occasional visits to our Savage office.
• The incumbent should be able to lift and position equipment up to 50 pounds and occasionally climb, kneel, or crawl to reach network equipment and cabling, with or without reasonable accommodation.
• Some work may fall outside standard hours for maintenance windows, outages, and security incidents.

About Highmark Companies

Highmark Companies is a family of six businesses spanning residential construction, home services, exteriors, restoration, custom cabinetry, and interior design — Highmark Builders, Highmark Home Services, Exteriors by Highmark, Restorations by Highmark, Christian Brothers Cabinets, and Ruby + Suede. We're headquartered in Savage, Minnesota.

Highmark Companies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity, marital status, familial status, status with regard to public assistance, membership or activity in a local human rights commission, disability, age, genetic information, veteran or military status, or any other characteristic protected by law.

We provide reasonable accommodations to qualified individuals with disabilities throughout the application process. Contact Human Resources to request an accommodation.

Requirements

Qualifications

Required

• 5+ years in systems administration or IT infrastructure, including 2+ years operating with real independent responsibility for an environment
• Administrator-level Microsoft 365 experience — Exchange Online, SharePoint, Teams, Entra ID, Intune, Defender (configuration and governance, not end-user support)
• Strong Windows Server and networking background: routing, switching, firewalls, VPN, VLANs, DNS, DHCP, multi-site troubleshooting
• Track record leading infrastructure or security projects independently, start to finish
• Working knowledge of a security framework (CIS Controls, NIST CSF, or similar), including hands-on remediation work
• Backup and disaster recovery administration, including performing and validating test restores
• Comfort making real decisions — architecture, vendor selection, security priorities, spend recommendations
• Ability to explain technical issues clearly to field crews, production staff, and executives alike
• Valid driver's license, acceptable driving record, ability & willingness to travel to our offices and job sites

Preferred

• Previous role as the sole or lead IT resource for a company of 100+
• Previous ownership of an internal IT function or moved an organization off an MSP
• Construction, property services, manufacturing, or another multi-site, field-heavy industry
• Azure infrastructure administration
• Palo Alto Networks firewall experience
• Certifications such as CompTIA Security+ or Network+, Microsoft 365 Certified: Administrator Expert, Azure Administrator Associate, CCNA, or Palo Alto PCNSA/PCNSE

Certifications are a plus, not a requirement. If you've built the skills on the job, we want to talk.