Note: The job is a remote job and is open to candidates in USA. Weeks Group is a provider of construction management, owner's representation, and consulting services for the mission-critical data center industry. The IT Systems Administrator will own corporate IT, including Microsoft 365, endpoint management, onboarding and offboarding, internal support, SaaS licensing, security compliance, and website updates for a fully remote workforce.
Responsibilities
- Provision accounts, licenses, and system access for new hires
- Configure and ship laptops so they arrive before the employee's start date
- On departure, recover the device, migrate user data to SharePoint and OneDrive in line with our retention policy, capture a disk image for archival, securely wipe the machine, and return it to inventory
- Disable accounts, reclaim licenses, and revoke SaaS access on schedule for every departure
- Maintain an accurate record of device inventory and lifecycle status, including current assignment, location, and condition
- Administer the Microsoft 365 tenant, including Entra ID, Exchange Online, Teams, OneDrive, and the Microsoft 365 admin center
- Build and maintain SharePoint sites, document libraries, and permission structures for teams across the company
- Manage users, groups, shared mailboxes, and license assignment
- Configure and enforce multi-factor authentication, conditional access, and least-privilege access policies
- Own a mixed Windows and macOS laptop fleet
- Administer mobile device management across both platforms, using Intune for Windows and Jamf or an equivalent tool with Apple Business Manager for macOS
- Manage operating system patching, application deployment, disk encryption (BitLocker and FileVault), and compliance baselines
- Handle device procurement, warranty claims, spares, and end-of-life disposal
- Serve as the first point of contact for internal IT requests, and triage, resolve, and track each request to closure
- Support a fully remote workforce, including staff working from locations with limited connectivity
- Write and maintain documentation and self-service guides to reduce repeat requests
- Administer SaaS licenses across our stack, including Microsoft, Adobe, ChatGPT, Claude, Cursor, GitHub, Azure, and Linear
- Provision and deprovision access, and reconcile assigned seats against actual usage
- Track renewal dates and identify unused licenses for reclamation
- Maintain endpoint security standards across the fleet
- Support phishing response and security awareness efforts
- Maintain our SOC 2 compliance by implementing and evidencing the controls that fall to IT, and keeping documentation current between audits
- Complete security questionnaires and produce the evidence required to satisfy security obligations in service agreements with enterprise clients
- Maintain and update the company website, including content changes, team profile photos, and image preparation
Skills
- Three to five years of experience in IT support, IT operations, or systems administration, preferably as the primary IT resource for an organization
- Production experience administering Microsoft 365, including Entra ID, Exchange Online, SharePoint Online, OneDrive, Teams, and license management
- Practical SharePoint administration experience covering site creation, library structure, and permissions
- Proficiency administering both Windows and macOS. This role is the internal expert on both platforms
- Mobile device management experience with Microsoft Intune, along with Jamf, Kandji, or an equivalent Apple MDM used alongside Apple Business Manager
- Endpoint lifecycle experience, including provisioning, disk encryption, data migration, disk imaging, secure wipe, and redeployment
- A record of owning onboarding and offboarding end to end at a steady cadence
- Asset inventory management and device logistics, including shipping hardware to and from remote employees
- Working knowledge of security fundamentals, including multi-factor authentication, conditional access, least privilege, endpoint protection, and secure handling of departing-employee data
- Ability to make content updates to a company website, including preparing and placing images
- Remote troubleshooting skills covering VPN, DNS, connectivity, and peripherals
- Clear written communication, including documentation and guidance for non-technical colleagues
- Adequate space to receive, store, stage, and ship laptops, and regular access to a shipping carrier
- Legal authorization to work in, and residence in, the continental United States or Canada
- Direct experience supporting a SOC 2 Type II audit or responding to enterprise client security reviews
- PowerShell and Microsoft Graph scripting to automate user, license, and device tasks
- Single sign-on and SCIM provisioning for SaaS applications through Entra ID enterprise applications
- Azure administration and GitHub organization administration
- Relevant certifications, such as Microsoft MS-102, MD-102, or AZ-104; Jamf Certified Associate; or CompTIA A+, Network+, or Security+
- Experience with Microsoft 365 backup and retention tools such as Afi, Veeam, or Datto
- Experience with a website content management system and basic image editing
Benefits
- Fully remote work arrangement
- A company-provided laptop configured and ready to use before the employee's start date
Company Overview