System Administrator

Purpose of the Job

The System Administrator is responsible for managing and securing enterprise cloud collaboration, identity, messaging, and productivity platforms for Church of the Highlands (“Highlands”). This role also oversees endpoint management, device lifecycle administration, security monitoring, and systems maintenance across Windows, macOS, iOS, and other supported platforms. The position requires proactive monitoring of security alerts, collaboration with technology partners, and implementation of best practices to maintain a secure and efficient IT ecosystem. This role ensures the reliability, security, and effectiveness of technology systems that support academic instruction, faculty, staff, and administrative operations across the church.

Key Responsibilities

Cloud Platform Administration

• Manage and maintain cloud-based identity, access, messaging, collaboration, and document management services.
• Configure and enforce security policies, access controls, and compliance requirements.
• Manage user accounts, licensing, permissions, and resource access across enterprise technology platforms.

Endpoint Management

• Deploy, configure, and manage endpoint devices using enterprise endpoint management solutions.
• Manage Windows, macOS, iOS, and other supported devices throughout their lifecycle.
• Ensure timely operating system and application patching across all managed devices.
• Maintain endpoint security and compliance standards.

Security Monitoring & Incident Response

• Monitor and respond to security alerts from:

• Security Information and Event Management (SIEM) platforms.

• Endpoint Detection and Response (EDR) solutions.

• Endpoint security tools.

• Managed Detection and Response (MDR) services.

• Investigate and remediate security incidents promptly.

• Maintain documentation of security events and resolutions.

• Collaborate with internal teams and technology partners during incident response activities.

Cloud Security & Vendor Collaboration

• Maintain a secure cloud posture aligned with organizational and educational best practices.
• Work closely with managed service providers, security partners, consultants, and vendors to enhance security measures.
• Implement recommendations from security assessments, audits, and vulnerability scans.

Governance & Best Practices

• Develop and maintain policies for endpoint security, cloud access, identity protection, and data security.
• Stay current on cloud technologies, cybersecurity threats, and endpoint management trends.
• Provide guidance and training to faculty and staff on security awareness and technology best practices.

Experience and Knowledge Required

• Bachelor's degree in Information Technology, Computer Science, or related field (or equivalent experience).
• Proven experience administering enterprise cloud productivity, identity, messaging, and collaboration platforms.
• Hands-on experience with enterprise endpoint management solutions.
• Understanding of SIEM, EDR, endpoint security, vulnerability management, and MDR services.
• Experience supporting cloud-first or hybrid enterprise environments.

Technical Knowledge Areas

• Identity & Access Management: User lifecycle management, conditional access, MFA, Zero Trust
• Cloud Messaging Systems: Mail administration, mail flow, spam filtering, security controls
• Collaboration & Document Management Platforms: Permissions, sharing, retention, compliance, governance
• Endpoint Management: Device enrollment, compliance policies, software deployment, configuration management
• Endpoint Security: Threat detection, endpoint protection, security controls, compliance monitoring
• Security Operations: Log collection, alerting, incident response, threat investigation workflows
• Networking Fundamentals: DNS, VPN, VLANs, DHCP
• Hybrid Infrastructure: Windows Server, Active Directory, Group Policy
• Vulnerability & Risk Management: Security assessments, remediation tracking, compliance validation

Backup, Disaster Recovery & Continuity

• Support Business Continuity Planning (BCP) and Disaster Recovery (DR) strategies.
• Assist with backup, recovery, and data protection solutions for both cloud and on-premises environments.
• Participate in disaster recovery testing and continuity planning activities.