> Markdown version of [/jobs/ext/1377277-systems-administrator-town-of-medfield-medfield-public-schools](https://www.wearedevelopers.com/jobs/ext/1377277-systems-administrator-town-of-medfield-medfield-public-schools). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Administrator: Town of Medfield/Medfield Public Schools - **Company:** Medfield Public Schools - **Location:** Medfield, MA, United States - **Experience:** Experienced - **Salary:** $90,000.0 - $100,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Apple IOS, Apple Mac Systems, User Authentication, Chrome OS, Cloud Computing, CompTIA Security+, Cyber Security, Data Retention, Dynamic Host Configuration Protocol, Disaster Recovery, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Windows Servers, Networking Basics, OAuth, OpenID, Zero Trust Network Access, Security Assertion Markup Language (SAML), Student Information Systems, Single Sign-On, TCP/IP, Virtual Local Area Networks, Casper Suite, Gsuite - **Published:** July 22, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e96ffa100b3c8676 ## About the Role * Experience: 3+ years in systems administration, ideally within a K-12, municipal, or public safety environment. * OS Proficiency: Advanced knowledge of Windows Server, macOS, ChromeOS, and iOS/iPadOS. * Core Infrastructure: Proven track record managing Active Directory, GPOs, and networking fundamentals (TCP/IP, VLANs). * Cloud Mastery: Expert-level administration of Google Workspace. Preferred Credentials * Certifications: CompTIA Security+, Microsoft Certified Associate, Google Professional Workspace Administrator, or Jamf/Mosyle certifications. * Public Safety Familiarity: Experience supporting IMC or other CJIS-compliant environments. * Cybersecurity Focus: Familiarity with hardening standards (CIS, NIST) and conditional access policies. Professional Attributes * Adaptability: The ability to pivot from a classroom setting to a municipal finance office or a fire station with ease. * Communication: Able to translate high-level technical risks into actionable advice for non-technical department heads. * Discretion: A high degree of integrity when handling sensitive personnel, student, or public safety data. ## Description The Town of Medfield and Medfield Public Schools seek a proactive, security-minded Systems Administrator to manage and optimize technology operations across our joint municipal and educational landscape. This is a high-impact, shared role responsible for maintaining a secure, resilient, and integrated digital infrastructure that serves town departments, public safety (Police/Fire/Dispatch), educators, and students. The successful candidate will be a versatile technical lead with deep expertise in Google Workspace, Active Directory, and Mobile Device Management (MDM). You will bridge the gap between K-12 instructional needs and municipal operational requirements, ensuring that every stakeholder-from the classroom to the emergency dispatch center-has the reliable tools they need to succeed. Primary Responsibilities1. Google Workspace & Cloud Governance * Security Architecture: Administer the Google Workspace for Education Plus environment with a "Zero Trust" approach (least-privilege access, context-aware security, and robust organizational unit design). * Compliance & eDiscovery: Manage Google Vault for legal holds, data retention, and public records compliance. * Ecosystem Safety: Audit and govern third-party API permissions and OAuth scopes to mitigate supply-chain risks. 2. Endpoint Security & MDM Orchestration * Fleet Management: Securely deploy and maintain a diverse fleet of Chromebooks, iPads, macOS, and Windows devices across all departments. * Policy Enforcement: Utilize Mosyle MDM and other tools to automate enrollment, enforce encryption, manage application lifecycles, and ensure OS patch compliance. * Asset Lifecycle: Maintain rigorous hardware asset tracking from procurement through secure decommissioning. 3. Identity & Access Management (IAM) * Directory Services: Manage Active Directory, Group Policy (GPO), DNS, and DHCP with a security-first configuration. * Modern Authentication: Implement and support Single Sign-On (SSO) integrations (SAML/OIDC) and Multi-Factor Authentication (MFA) strategies. * Provisioning: Streamline onboarding/offboarding workflows, integrating Student Information Systems (SIS) with core identity providers. 4. Municipal & Public Safety Systems Support * Application Ownership: Serve as the technical lead for essential municipal platforms, including OpenGov, IMC, Munis, and Patriot Properties. * Public Safety Continuity: Provide specialized support for Police, Fire, and Dispatch systems, prioritizing 24/7 uptime, data confidentiality, and vendor coordination for mission-critical tools. * Vendor Liaison: Act as the primary point of contact for software vendors to resolve complex bugs, manage upgrades, and oversee licensing renewals. 5. Infrastructure, Integration & Tier 2 Support * Cloud Print Management: Administer PaperCut or similar solutions across a multi-OS environment. * Technical Escalation: Act as the Tier 2/3 escalation point for complex technical issues, performing root-cause analysis rather than just "quick fixes." * Disaster Recovery: Assist in maintaining backup integrity, incident response planning, and business continuity documentation. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data) - [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)