Windows Systems Administrator

We are seeking an experienced, agile, and collaborative Windows Systems Administrator with the maturity, confidence, and sound design, troubleshooting, and decision-making skills required to operate as a Tier 3 technical resource within a GxP-regulated environment. Reporting to the Sr. Infrastructure Manager, this role will own the day-to-day execution of INCOG’s patch and vulnerability management program and will serve as the technical lead for onboarding new software and hardware systems.

This position requires a passion for IT, systems administration, and supporting the ever-changing technology needs of the company, along with the ability to work independently and collaboratively at all levels of the organization. The IT Systems Administrator will partner closely with our Managed Services Provider (MSP), program managers acting as technical system owners, and stakeholders across Quality, Engineering, and Operations to ensure infrastructure and enterprise systems remain reliable, secure, and inspection-ready.

Essential Job Functions:

Infrastructure, Endpoint & Tier 3 Operations

• Administer Microsoft Azure / Entra ID infrastructure, including user accounts, groups, conditional access policies, Intune, mobile device management, and endpoint security.
• Serve as the onsite Tier 3 escalation point for complex infrastructure, endpoint, and system issues that cannot be resolved by the MSP-operated Tier 1/2 helpdesk; provide oversight, technical direction, and quality feedback to MSP resources.
• Partner with the Security Analyst, who owns access reviews and audit trail reviews, by providing technical support, data extracts, and remediation actions as needed.
• Work closely with Engineering, Quality Control, Quality Assurance, and other stakeholders to deliver infrastructure solutions that drive operational excellence and process improvements.
• Ensure alignment with internal directives, regulatory expectations, and industry guidelines for supported applications and systems.
• Participate in occasional after-hours and weekend work to support scheduled maintenance windows, patching cycles, and system onboarding activities.

Patch & Vulnerability Management

• Own day-to-day execution of the enterprise patch management program for Windows endpoints and servers, leveraging WSUS as the primary tooling.
• Plan, schedule, and execute patching cycles in coordination with the MSP, including pre-deployment testing, phased rollouts, maintenance window coordination, and post-deployment validation.
• Assist the MSP and Infrastructure team with patching and firmware updates for network gear and firewalls; coordinate change windows and validate post-patch connectivity.
• Plan and execute patching for laboratory and engineering instrument workstations and servers, accounting for vendor-validated configurations, locked OS images, and qualification status.
• Track patch compliance, exceptions, and remediation timelines; escalate risks and report status to the Sr. Infrastructure Manager.
• Maintain patch-related runbooks, work instructions, and change documentation in accordance with GxP and Good Documentation Practices.

System Onboarding & Lifecycle Administration

• Serve as the IT technical lead for onboarding new software platforms and hardware systems including Lab and Engineering instruments and equipment joining the domain while partnering with the program manager as the designated technical system owner.
• Coordinate with vendors, system owners, Quality, and Validation to plan integration activities, network/domain join requirements, account provisioning, endpoint security baselines, and documentation handoffs.
• Author and maintain system work orders, runbooks, configuration records, and supporting documentation to ensure assets are reliable, accessible, secure, and inspection-ready.
• Administer, support, and maintain workstations, servers, and instrument software across Quality Control labs, Engineering, and other business areas throughout their lifecycle.
• Support continuous improvement of onboarding standards, intake processes, and lifecycle controls in alignment with ITIL and GxP expectations., Qualified applicants must be authorized to work in the United States on a full-time basis. INCOG will not provide support for or sponsor work authorization or visas for this role, including but not limited to F-1 CPT, F-1 OPT, F-1 STEM OPT, J-1, H-1B, TN, O-1, E-3, H-1B1, or L-1.

By submitting your resume and details, you are declaring that the information is correct and accurate.

• 5+ years of progressive IT administration experience.
• 3+ years of experience managing the Microsoft Azure / Entra ID platform, including Intune, MDM, endpoint management, Teams, SharePoint, and related Azure-powered solutions.
• Demonstrated experience operating an enterprise patch management program, including WSUS administration, patch cycle planning, and coordination with managed service providers.
• 5+ years of proven experience maintaining and troubleshooting Windows-based workstations and servers.
• Experience supporting the onboarding and lifecycle administration of enterprise software platforms and instrument/laboratory hardware in a regulated environment.
• Proven experience as a Tier 2/Tier 3 escalation resource with a strong customer service mindset; experience providing technical oversight to or partnership with an MSP is a plus.
• Working knowledge of SOP authoring, systems support, Data Integrity guidance, GxP compliance, Software Development Life Cycle, ITIL, and Good Documentation Practices in a regulated environment.
• B.S. in Engineering, Computer Science, Information Technology, or related field; or equivalent experience.

Additional Preferences

• Advanced certification in Microsoft Azure platforms (e.g., AZ-104, AZ-500).
• Microsoft Endpoint Administrator certification (MD-102) or equivalent endpoint/patching credential.
• ITIL Foundation certification.
• CompTIA Security+ or equivalent security credential.
• Familiarity with GAMP 5 and Computer System Validation (CSV) concepts.

At INCOG BioPharma we have built a world-class CDMO for parenteral injectable drugs. Our culture and priorities are different by design: focused on building long-term value for our customers, we are committed to a service-culture mindset, technical excellence, and a collaborative and team-centered approach to doing business.

If you crave the challenge of creating systems from scratch and believe you have insights for a better way of doing business, which benefits customers by ensuring quality outcomes and accelerating their route to market, we want to hear from you. Unless otherwise specified, all positions are based out of our Fishers, IN offices. Please note, we are a smoke-free campus.