> Markdown version of [/jobs/ext/3622158-systems-administrator-ii](https://www.wearedevelopers.com/jobs/ext/3622158-systems-administrator-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Administrator II - **Company:** Fire & Police Pension Association Of Co - **Location:** Wheat Ridge, CO, United States (Remote available) - **Experience:** Expert - **Salary:** $100,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, User Authentication, Microsoft Azure, Microsoft Online Services, Cyber Security, Data Recovery, Disaster Recovery, Multi-Factor Authentication, Identity and Access Management, Microsoft Software, Networking Basics, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Runbook, Microsoft SharePoint, Software Deployment, Virtual Machines, Software Vulnerability Management, Enterprise Software Applications, Microsoft InTune, Microsoft Onedrive, Infrastructure Automation Frameworks, Information Technology, Deployment Automation, Patch Management, CIS Benchmarks, Cloud Optimization, Azure Resource Manager, Unified Endpoint Management - **Published:** October 8, 2026 - **Apply:** https://www.disabledperson.com/jobs/75914408-systems-administrator-ii ## About the Role * Bachelor's degree in Computer Science or a related field preferred. An equivalent combination of education, certifications, and relevant experience may be considered. * Five or more years of progressively responsible experience administering Microsoft enterprise technology environments. * Hands-on production experience with Microsoft Intune, Microsoft Entra ID, enterprise Windows endpoints, Microsoft 365, and Microsoft Azure services. * Experience with endpoint configuration, enterprise patch management, backup and restoration, PowerShell automation, and complex technical troubleshooting. * Experience leading or participating in infrastructure implementations, service improvements, migrations, or technology projects. * Strong understanding of systems administration, identity and access management, documentation, change control, cybersecurity collaboration, and operational support practices., * Strong analytical, diagnostic, troubleshooting, organization, project coordination, documentation, testing, and change-control skills. * Excellent written and verbal communication skills, including the ability to explain technical information to non-technical stakeholders. * Ability to independently manage priorities, follow work through completion, collaborate across teams, and appropriately escalate operational, security, and project risks. * Service-oriented mindset and commitment to continuous learning as Microsoft technologies and organizational needs evolve. Working Conditions * Hybrid position requiring a combination of on-site and remote work and regular use of cloud administration, automation, and remote-support technologies. * Occasional work outside standard business hours may be required for maintenance, deployments, incident response, recovery testing, or project activities. * Occasional lifting, movement, installation, or replacement of computer and infrastructure equipment may be required. ## Description The Fire & Police Pension Association of Colorado (FPPA) is seeking an experienced Systems Administrator II to administer, support, and continuously improve the organization's Microsoft cloud, endpoint, identity, and productivity platforms. This hands-on role helps ensure reliable, secure, available, and effective enterprise technology services. The position provides advanced technical expertise across Microsoft Intune, Microsoft Entra ID, Microsoft 365, Azure services, enterprise file services, patch management, backup and recovery, and infrastructure automation. It also leads assigned technology projects, resolves complex issues, establishes sustainable support practices, and collaborates with IT staff, business stakeholders, vendors, consultants, and Microsoft partners Key Responsibilities Endpoint Management & Identity * Administer Microsoft Intune for device enrollment, configuration, compliance, application deployment, updates, and lifecycle management. * Administer Microsoft Entra joined and hybrid device environments, Windows Autopilot, Windows Hello for Business, and enterprise Windows endpoints. * Maintain endpoint configuration standards, device profiles, compliance policies, security baselines, and accurate inventories and procedures. * Administer Microsoft Entra ID accounts, groups, device identities, enterprise applications, administrative roles, multifactor authentication, Conditional Access, and role-based access controls. * Support identity lifecycle processes and troubleshoot complex enrollment, authentication, synchronization, access, application, policy, and device issues. * Coordinate identity and endpoint requirements with cybersecurity, information governance, human resources, and business stakeholders. Microsoft Azure, File Services & Microsoft 365 * Administer assigned Azure services, including virtual machines, storage, Azure Files, networking, monitoring, backup, recovery, and related cloud resources. * Monitor availability, capacity, performance, resource utilization, and service health and troubleshoot infrastructure incidents with internal and external partners. * Configure Azure resources and enterprise file services in accordance with approved architecture, cybersecurity, governance, access, retention, and operational standards. * Administer assigned Microsoft 365 services, including Exchange, Teams, SharePoint Online, OneDrive, Intune, Entra ID, licensing, groups, tenant settings, and service integrations. * Support hybrid integrations and contribute to cloud optimization, resiliency, modernization, and continuous improvement initiatives. * Maintain technical documentation for resources, configurations, dependencies, ownership, permissions, and operating procedures. Patching, Automation, Backup & Recovery * Administer and optimize enterprise patch management and software update processes across supported endpoint and infrastructure platforms. * Manage Windows Update for Business, Intune update policies, maintenance schedules, deployment status, exceptions, testing, failed deployments, and remediation activities. * Develop and maintain PowerShell scripts and other approved automation to improve consistency, reliability, reporting, and administrative efficiency. * Administer Azure Backup, Recovery Services vaults, backup policies, schedules, retention settings, alerts, monitoring, and recovery documentation. * Monitor backup operations, investigate failures and capacity concerns, and perform and document routine restoration testing. * Support disaster recovery planning, exercises, technical recovery activities, and continuous improvement of recovery capabilities. PAS Data Readiness & Migration Operations, Projects & Collaboration * Monitor assigned services and provide advanced troubleshooting, root-cause analysis, and escalation support for infrastructure, endpoint, identity, and Microsoft 365 incidents. * Lead and participate in endpoint, identity, cloud, file services, backup, patching, automation, and Microsoft 365 projects. * Develop technical requirements, test plans, implementation and rollback procedures, project documentation, and sustainable operational support models. * Evaluate Microsoft technologies and recommend improvements that enhance security, reliability, efficiency, supportability, and user experience. * Follow change, incident, problem, configuration, and asset-management processes and coordinate work with business units, vendors, consultants, and technology partners. * Partner with cybersecurity staff to implement assigned technical controls, support vulnerability remediation and authorized reviews, and escalate material risks or suspected incidents. * Participate in approved after-hours maintenance or support activities and mentor service desk personnel through technical guidance and knowledge sharing., * Microsoft Intune, Windows Autopilot, Windows 10/11, Entra joined and hybrid device management, Windows Hello for Business, Windows Update for Business, endpoint compliance, application deployment, and device lifecycle management. * Microsoft Entra ID, multifactor authentication, Conditional Access, passwordless authentication, role-based access control, identity lifecycle administration, and device identities. * Azure virtual machines, Azure Storage and Azure Files, Azure Backup, Recovery Services vaults, monitoring, alerts, networking fundamentals, resource groups, subscriptions, tagging, and Azure role-based access control. * Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft 365 administration, licensing, service health, and support. * PowerShell, configuration and patch management, monitoring, recovery procedures, technical documentation, and operational runbooks.