Description Systems Administrator Reports To: Head of IT Engineering | Location: Indianapolis, IN | Work Arrangement: Full-time, hybrid Compensation: See details below ROLE SUMMARY The Systems Administrator supports, secures, governs, and standardizes Microsoft cloud environments across more than 100 client and partner-firm tenants. Working with IT engineers and cross-functional partners, this hands-on role administers identity and access, endpoint management, collaboration platforms, data protection, and Microsoft 365 Copilot readiness. The administrator applies changes carefully, documents technical controls, and supports reliable operations in a regulated financial services environment. ESSENTIAL DUTIES AND RESPONSIBILITIES · Administer Microsoft 365 and Microsoft Entra ID across multiple tenants, including identities, permissions, privileged access, and secure authentication. · Design, test, deploy, and maintain Conditional Access policies covering multifactor authentication, device compliance, legacy authentication, risk-based access, and session controls; use report-only mode and pilot groups to reduce disruption. · Manage Microsoft Intune enrollment, Windows Autopilot, device configuration, compliance policies, application deployment, endpoint security baselines, and alignment with Conditional Access. · Govern SharePoint Online and OneDrive sharing, permissions, site ownership, guest access, and lifecycle controls; support migrations from Box and Egnyte with appropriate retention and records considerations. · Configure and maintain Microsoft Purview sensitivity labels (including site and group labels), data loss prevention, retention, auditing, and eDiscovery; partner with Compliance on technical requirements and evidence. · Support Microsoft 365 Copilot licensing, readiness assessments, governance, and deployment; identify and remediate oversharing or data-protection risks before rollout. · Help maintain consistent security and configuration baselines across 100+ tenants using GDAP, Partner Center, and tools such as Inforcer; monitor configuration drift, manage documented exceptions, and coordinate controlled deployments. · Use PowerShell and Microsoft Graph to audit, report on, automate, and configure Microsoft 365 environments at scale; maintain runbooks, standards, and technical documentation. · Investigate suspicious sign-ins, account compromise, and endpoint/security alerts using Entra, Microsoft Defender, and Purview logs; assist with remediation and security reviews. · Troubleshoot escalated cloud, endpoint, identity, and collaboration issues; collaborate with the help desk, engineering teams, vendors, and partner firms to resolve root causes. · Support ongoing system monitoring, patching, backup and recovery, business continuity, and broader IT infrastructure needs as assigned. · Participate in technology initiatives, migrations, and service improvements, following change-management practices and communicating impacts to stakeholders. REQUIRED QUALIFICATIONS · 5+ years of systems or cloud administration experience, including 3+ years of hands-on Microsoft 365 administration in production environments. · Demonstrated depth in Entra ID and Conditional Access, Intune device management and compliance, SharePoint Online governance, and Microsoft Purview sensitivity labels and DLP. · Strong PowerShell skills, including experience with Microsoft Graph and Microsoft 365 administrative modules. · Ability to identify security and governance gaps, troubleshoot complex issues, and implement changes safely across production environments. · Strong documentation, collaboration, communication, prioritization, and change-management skills. PREFERRED QUALIFICATIONS · Experience with Microsoft 365 Copilot administration, readiness, or governance. · Multi-tenant, MSP, or CSP experience, including GDAP, Microsoft Partner Center, Lighthouse, Inforcer, or similar tools. · Experience with Microsoft Defender, Okta, hybrid identity, and Microsoft Azure. · Experience in financial services or another regulated industry; familiarity with CIS Microsoft 365 benchmarks. · Relevant certifications such as MS-102, SC-300, MD-102, SC-400, or SC-401. · Bachelor’s degree in a technology-related field or an equivalent combination of education, certifications, and relevant professional experience.