Systems Administrator

We are seeking a Systems Administrator to join our IT team. Reporting to the Director of IT Operations, this role will spend approximately 90-95% of its time on broad, hands-on systems administration across Microsoft 365, Google Workspace, identity, endpoints, security tooling, SaaS and collaboration platforms, vendors, documentation, automation, and improvement projects. You will work alongside other Systems Administrators, Level 3 IT Analysts, and the Help Desk team.

Brio Water and its IT organization are evolving quickly, and responsibilities, priorities, and processes will change over time. The remaining 5-10% of the role involves periodic networking, Azure Site Recovery, Azure and AWS services, public DNS, automated backups, and recovery testing. These are important responsibilities, but they are not the daily or full-time focus of the position.

• →Proactively identify operational risks and improvement opportunities, recommend practical solutions, and help implement platform rollouts, upgrades, migrations, integrations, office changes, and other approved initiatives.
• →Administer Entra ID, Active Directory, Microsoft 365, Exchange Online, Teams, SharePoint, OneDrive, Google Workspace, and related identity, access, licensing, mailbox, group, and shared-resource functions.
• →Administer endpoint management, patching, remote support, encryption, monitoring, EDR, and related security and operations tools across Windows and macOS devices; investigate alerts, failed automation, and recurring exceptions.
• →Troubleshoot complex incidents involving authentication, permissions, mail flow, calendars, room systems, applications, endpoints, connectivity, SaaS platforms, and vendor integrations; identify root causes and turn repeat issues into durable fixes or runbooks.
• →Use PowerShell and other appropriate automation to simplify recurring administration, reporting, deployment, validation, and cleanup while following practical testing, communication, documentation, and rollback practices.

• →Support and troubleshoot managed switches, firewalls, Wi-Fi, VLANs, routing, DHCP, internal DNS, site-to-site and client VPNs, segmentation, and multi-site connectivity, coordinating with vendors when appropriate.
• →Maintain the small onsite server and storage footprint, review automated backup and replication alerts, resolve exceptions, and support periodic restores. Maintain Azure Site Recovery and assigned Azure, AWS, public DNS, domain, and certificate services, including replication health, recovery plans, documentation, test failovers, failback, and other approved recovery testing.

• Bachelor's degree in a related field or equivalent practical experience, plus 4+ years of hands-on systems administration or infrastructure operations experience in a production business environment.
• Practical experience administering Microsoft 365, Google Workspace, Entra ID, Active Directory, identities, permissions, licenses, mailboxes, groups, and shared resources.
• Experience administering endpoint management, patching, EDR or antivirus, encryption, monitoring, and remote support tools across Windows and macOS devices.
• Strong cross-system troubleshooting skills and experience implementing technology changes, coordinating vendors, validating results, and documenting completed work.
• Demonstrated networking fundamentals and practical troubleshooting experience with TCP/IP, managed switches, VLAN tagging and trunk ports, routing, firewalls, VPNs, Wi-Fi, DNS, and DHCP.
• Familiarity with Azure administration and Azure Site Recovery or a comparable recovery platform, along with working knowledge of AWS, public DNS, certificates, automated backup and restore processes, and basic recovery testing.
• Working PowerShell skills, clear communication, practical documentation habits, sound judgment, and comfort operating in an evolving organization with changing priorities and responsibilities.

• Direct experience with Azure Site Recovery, Recovery Services vaults, replication policies, recovery plans, test failovers, and failback.
• Hands-on Cisco or Fortinet experience and experience supporting managed networks or infrastructure across multiple sites.
• Experience with Microsoft 365 and Google Workspace coexistence; endpoint, security, or monitoring tools such as CrowdStrike, Datadog, NinjaOne, or PDQ; or relevant Azure or AWS certifications.