Enterprise Systems Administrator

Under limited supervision, perform advanced hands-on administration, configuration, security, maintenance, and lifecycle support for organization-wide enterprise systems and cloud services. Serve as an advanced technical resource for complex incidents, integrations, migrations, and platform changes. Administer Microsoft 365 A5 as the foundational platform for identity, access, endpoint management, messaging, collaboration, communications, licensing, security, and integrations. Ensure services are reliable, secure, documented, and compliant with organizational standards, change control, audit requirements, and service levels; perform other duties as required.

Core Activities:

• Perform advanced administration and maintenance of enterprise servers, storage, virtualization, cloud infrastructure, directory services, certificates, monitoring, backups, and related platforms.
• Configure, secure, and support Microsoft 365 A5, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user lifecycle, access, and rights management.
• Diagnose and resolve complex availability, performance, authentication, configuration, integration, and security incidents; perform root-cause analysis and document corrective actions.
• Design and implement approved system builds, upgrades, migrations, integrations, and configuration changes, including testing, change records, rollback plans, and production validation.
• Apply and validate patching, hardening, encryption, privileged-access, least-privilege, and configuration-baseline requirements across systems and endpoints.
• Operate backup, restore, and recovery capabilities; perform recovery testing, verify recovery objectives, and retain evidence supporting business continuity and disaster recovery.
• Automate administration, deployment, monitoring, alerting, dashboards, and reporting to improve reliability and consistency.
• Maintain architecture diagrams, inventories, configuration records, standards, procedures, runbooks, support documentation, and knowledge articles.
• Perform account, device, mailbox, access, and group lifecycle tasks for onboarding, transfers, offboarding, decommissioning, and secure disposal.
• Implement requirements, resolve platform issues, and support integrations, in collaboration with business/system owners, technical staff, and vendors.
• Research platform updates and options; prepare evidence-based recommendations addressing security, risk, dependencies, supportability, cost, and impact.
• Respond to escalated requests and after-hours emergencies through restoration and documentation; support continuous operation of critical services.
• Provide technical evidence for audits, assessments, and remediation activities; share system knowledge and procedures with technical colleagues.

• BS/BA degree or equivalent combination of education, training, and experience
• 7+ years of hands-on enterprise systems administration or closely related experience supporting production environments
• Proven advanced experience administering Microsoft 365 in a complex enterprise environment, including Entra, Intune, Exchange, MFA/passwordless authentication, SSO, SharePoint, Teams, VoIP, licensing, integrations, user/access lifecycle, and rights management
• Advanced knowledge of servers, storage, virtualization, cloud infrastructure, backup/recovery, monitoring, certificates, and enterprise platform operations
• Strong knowledge of identity and access management, privileged access, least privilege, authentication, authorization, and directory-service concepts
• Experience with endpoint enrollment, compliance, configuration, application deployment, encryption, inventory, and device lifecycle processes
• Experience planning and executing system builds, upgrades, migrations, integrations, patching, and production changes
• Experience with disaster recovery, restore testing, recovery objectives, business continuity, and evidence retention
• Proficiency with scripting/automation and producing operational dashboards and reports
• Strong knowledge of security hardening, configuration baselines, vulnerability remediation, change control, and audit support
• Working knowledge of networking concepts relevant to systems administration, including name resolution, addressing, routing, secure communications, and service connectivity
• Advanced troubleshooting and root-cause analysis skills across integrated enterprise services
• Ability to translate business and technical requirements into secure, reliable, and supportable system configurations
• Ability to work independently with limited supervision, balance competing priorities, and complete complex work reliably
• Sound judgment in ambiguous or high-impact situations and ability to escalate material risk promptly
• Strong written and verbal communication skills, including the ability to explain technical issues to technical and nontechnical audiences
• Strong documentation, organization, and attention-to-detail skills
• Collaborative service orientation and ability to work effectively with business/system owners, technical peers, vendors, and auditors
• Ability to protect confidential information and maintain appropriate security, privacy, and access controls
• Ability to work within and maintain Monterey Bay Aquarium’s Core Values and participate in scheduled after-hours/on-call support

Physical Requirements to Perform Essential Job Functions:

• Typical office equipment
• Constant sitting, standing, walking, bending
• Occasional unassisted lifting up to 50 lbs
• Typical office environment, main aquarium and exhibits, occasional offsite events

Annual Compensation Range: $87,100 - $107,000 USD annually. Starting rate will vary based on previous experience and relevant skills/knowledge set.

Skills: Access Control, Analysis Skills, Authentication, Business Skills, Business Solutions, Business Support, Change Control, Cloud Computing, Communication Skills, Computer Security, Corrective Action, Cryptography, Data Recovery, Detail Oriented, Disaster Recovery, Diversity, Documentation, Encryption Software, Identify Issues, Identity Data Management, Information/Data Security (InfoSec), Infrastructure as a Service (IaaS), Inventory Reports, Licensing, Lift/Move 50 Pounds, Microsoft Access Database, Microsoft Exchange Server, Microsoft Product Family, Microsoft SharePoint, Office Equipment, On Call, Onboarding, Operational Support, Physical Demands, Presentation/Verbal Skills, Privacy Controls, Problem Solving Skills, Production Support, Production Systems, Reliability Engineering, Reporting Dashboards, Risk, Root Cause Analysis, Scripting (Scripting Languages), Server Maintenance, Single Sign-On (SSO), Software Patches, Support Documentation, Systems Administration/Management, Team Player, Testing, Validation Plan, Vendor/Supplier Evaluation, Virtualization, VoIP (Voice over IP), Writing Skills