Note: The job is a remote job and is open to candidates in USA. Pyx Health is a cloud-native digital health company with a 100% Microsoft/Azure IT environment that complies with HITRUST r2 and HIPAA requirements. The Junior Systems Administrator will manage identity, endpoints, SaaS applications, helpdesk escalations, security processes, and compliance documentation on a five-person IT team.
Responsibilities
- Manage user lifecycle in Entra ID: onboarding, permission and group changes, password resets, MFA and Conditional Access troubleshooting, and clean offboarding
- Administer Intune device profiles, compliance policies, and enrollment for Windows and macOS endpoints
- Support Single Sign-On (SAML/OIDC) configuration and troubleshooting for enterprise applications
- Resolve Exchange Online and Microsoft 365 issues escalated from the helpdesk
- Assist with Windows 365 Cloud PC provisioning and Azure resource housekeeping
- Manage user access, roles, and permission sets in Salesforce and other SaaS platforms following least-privilege principles
- Assist with Salesforce sandbox refreshes and moving users in and out of test environment
- Support integrations between HRIS, identity, and business systems (provisioning flows, API and webhook troubleshooting)
- Execute monthly patching cycles (Action1) and confirm endpoint compliance
- Follow documented procedures for access control, change management, and incident response
- Serve as Tier 2 escalation for the Helpdesk Lead
- Keep runbooks and knowledge base articles current in Confluence
Skills
- 1 to 3 years of hands-on experience administering Microsoft Entra ID (Azure AD) and Microsoft 365 in a cloud-first or fully cloud environment, including device profiles, user permissions, offboarding, password resets, and SSO
- Working knowledge of Microsoft Intune device enrollment and configuration
- Solid understanding of role-based access control and user permission management across SaaS applications
- Experience troubleshooting VPN, DNS, and cloud connectivity issues
- Foundational networking knowledge (OSI model, TCP/IP, firewall and routing concepts)
- Basic SQL and comfort reading API and webhook log
- Clear written and verbal communication; able to document work and explain issues to non-technical staff
- Salesforce administration exposure, particularly permissions, profiles, and sandbox management
- Cisco Meraki dashboard experience
- Windows 365 or Azure Virtual Desktop experience
- Exposure to HIPAA, HITRUST, SOC 2, or similar compliance framework
- PowerShell or Microsoft Graph scripting
Company Overview