Senior Systems Administrator

You will play a central role in making that transition successful while ensuring the environment remains secure, efficient, and continuously prepared for SOC 1 and SOC 2 audits. This is a hands-on position for someone who enjoys owning an environment, improving how systems operate, and preventing issues before they disrupt the business. You should be equally comfortable configuring endpoint policies, automating an administrative process, investigating a security alert, and explaining a technical requirement to a non-technical colleague. What You’ll Own Business Systems Administration

• Administer core business platforms, including Monday.com, Jira, HubSpot, and other SaaS applications
• Manage user provisioning, permissions, workspace structures, integrations, and license utilization
• Oversee Claude access and spending controls, including seat provisioning, group membership, usage limits, and budget monitoring
• Identify access drift, unnecessary licenses, and configuration gaps before they create security, cost, or compliance concerns

Endpoint Management

• Own Microsoft Intune administration for the Windows environment
• Administer Jamf for Macs and iPads
• Manage device enrollment, compliance policies, configuration profiles, application deployment, and patching
• Build and maintain trusted laptop standards covering encryption, security baselines, conditional access, and device lifecycle management
• Support the transition from VDI to managed laptops, including device preparation, data migration, employee onboarding, troubleshooting, and exception management
• Manage devices from initial provisioning through secure decommissioning

Identity, Access, and Collaboration Tools

• Administer Microsoft 365 and Microsoft Entra, including SSO, group management, conditional access, identity governance, and license assignments
• Own the technical execution of employee onboarding and offboarding from beginning to end
• Administer OneDrive and SharePoint governance, including storage, retention, permissions, and external-sharing controls
• Ensure access practices remain appropriate for an organization entrusted with sensitive client information

Automation and Operational Improvement

• Use PowerShell or Python to automate repetitive administrative tasks
• Improve onboarding, offboarding, reporting, license reconciliation, and compliance evidence collection
• Build dependable processes that reduce manual work, strengthen controls, and make the environment easier to manage as the company grows

Security and Compliance

• Monitor alerts across Microsoft 365 Defender, Intune, and other endpoint security tools
• Investigate and triage events with sound judgment, escalating issues with a clear assessment of severity and potential impact
• Support ISMS automation through Vanta
• Own technical evidence collection for SOC 1 and SOC 2, including access reviews, device compliance, patch records, and offboarding documentation
• Keep controls and supporting evidence continuously audit-ready
• Proactively identify control weaknesses and resolve them before they become audit findings, * Take ownership of systems and follow issues through to resolution
• Look for opportunities to prevent problems instead of repeatedly reacting to them
• Balance security and compliance requirements with the practical needs of the business
• Communicate clearly and respectfully with both technical and non-technical colleagues
• Enjoy improving processes, eliminating repetitive work, and creating more dependable operations
• Work well in an agile, high-accountability environment where initiative is valued
• Bring curiosity, sound judgment, and a service-oriented mindset to your work

• 6 or more years of experience in systems administration, IT operations, endpoint management, or a related business technology role
• Hands-on experience administering Microsoft Intune and Microsoft 365/Entra
• Working knowledge of conditional access, identity governance, SSO, group administration, and license management
• Experience using Jamf to manage macOS and iPad devices
• Experience administering SaaS business platforms such as Monday.com, Jira, HubSpot, or comparable applications
• Strong understanding of application permissions, integrations, user access, and license governance
• Working knowledge of OneDrive and SharePoint administration, including retention and external-sharing policies
• Proficiency with PowerShell or Python and the ability to automate routine administrative work and reporting
• Experience supporting SOC 1 or SOC 2 controls, audits, and technical evidence collection
• Practical security monitoring experience and the judgment to determine what requires investigation or escalation
• Strong written and verbal communication skills
• The ability to explain technical requirements and constraints clearly to employees at all levels

Experience with Vanta, compliance automation, or a VDI-to-physical-endpoint migration is highly valued but not required. A background check is required for this position.

MOGEL is partnering with a growing, technology-enabled financial consulting firm to hire a Senior Systems Administrator who will take ownership of the business platforms, devices, and identity controls its employees rely on every day. This is an important hire at a pivotal time for the organization. The firm is moving away from a virtual desktop environment and transitioning to managed, trusted laptops. As that shift takes place, endpoints will become a critical part of the company’s security perimeter., Our client is a nationally recognized financial consulting firm that helps public and private companies navigate complex financial reporting, valuation, and human capital matters. The organization combines the rigor and client service of a leading professional services firm with the energy, innovation, and growth mindset of a technology-enabled business. Its culture is collaborative, feedback-rich, and committed to professional development, continuous improvement, and exceptional client service.