Mediabistro logo
job logo

Systems Administrator & Support Lead New York, NY · Full-time

Safehold, Inc., New York, NY, United States


- Description

The website's WordPress theme uses this cookie. It allows the website owner to implement or change the website's content in real-time.- Description

WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user's browser can display emojis properly.- Description

Google Recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks.- Description

This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.- Description

The Hotels Network sets this cookie to improve security and provide load-balancing to ensure that a client's requests are sent to the same origin server.- Description

Incapsula sets this cookie to provide cloud-based website security services.- Description

This is an Incapsula DDoS Protection and Web Application Firewall cookie that is used to relate HTTP requests to a certain session.- Description

CookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.- Description

LinkedIn sets the lidc cookie to facilitate data center selection.- Description

Google Analytics sets this cookie to store and count page views.- Description

Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.- Description

Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously.- Description

Google Analytics sets this cookie to store a unique user ID.- Description- Description

Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.- Description

Adobe-Dtm sets this cookie to store a unique ID to identify a unique visitor.- Description

Adobe-Dtm sets this cookie to find the unique user ID that recognises the user on returning visits.- Description- Description- Description

Rubicon Project sets this cookie to control the synchronization of user identification and the exchange of user data between various ad services.- Description

MediaMath sets this cookie to avoid the same ads from being shown repeatedly and for relevant advertising.- Description

Description is currently not available.- Description

Description is currently not available.- Description

Description is currently not available.- Description

Description is currently not available.- Description

No description available.## Systems Administrator & Support LeadNew York, NY · Full-time#### About The PositionPosition: Systems Administrator & Support LeadLocation: New York, NY (Onsite 4 days a week)Reports to: VP, Infrastructure EngineerSUMMARYSafehold Inc. is seeking a highly skilled, adaptable, and service‑oriented Systems Administrator & Support Lead to oversee the firm’s IT infrastructure while serving as the primary point of contact for all end‑user support. This role requires a versatile, multi‑disciplinary IT professional capable of operating across cybersecurity, networking, hardware, software, cloud services, and daily support operations. This individual plays a critical role in maintaining operational stability, delivering exceptional user experience, and supporting the evolving technology needs of the organization.RESPONSIBILITIES**Infrastructure and System Administration*** Review, analyze, and resolve security alerts, vulnerabilities, and threat notifications, ensuring timely remediation and incident follow‑up* Manage the firm’s cybersecurity awareness program, including KnowBe4 training campaigns, phishing simulations, user enrollment, tracking completion, and generating compliance or audit reports.* Manage all identity and access platforms, including Entra ID, Active Directory, Group Policy, MFA, Conditional Access policies, SSO integrations for SaaS applications, and authentication/authorization workflows* Administer and support the full Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint, OneDrive, Intune endpoint management, security/compliance configurations, application policies, and end‑to‑end user lifecycle operations* Manage the firm’s cloud‑based infrastructure and on‑premises firewalls, switches, networking components, and connectivity services* Configure, maintain, and support remote access and VPN services (Fortinet), including profile creation, policy updates, MFA integration, and troubleshooting connectivity issues for remote users.* Coordinate with external providers—including MSPs for Azure and networking, SaaS vendors, and security service partners* Leverage AI‑assisted tools (e.g., Microsoft Copilot, ChatGPT) to streamline workflows, improve operational processes, enhance documentation quality, and support continuous improvement efforts across the organization* Provide documentation, evidence, and remediation support for internal and external audit and compliance reviews* Manage patching and updates for operating systems, applications, endpoints, and servers to maintain a secure and compliant environment* Troubleshoot and resolve issues across the full infrastructure stack—including endpoints, servers, virtualization, storage, networking, remote access, WAN acceleration, and security tools—while identifying and implementing root‑cause fixes to prevent recurrence* Oversee asset lifecycle management, including procurement, inventory tracking, licensing, warranty management, and timely replacement of end‑of‑life hardware* Develop scripts and automations (e.g., PowerShell, Graph API, Intune automations) to streamline provisioning, reporting, and remediation, reducing manual effort and operational overhead**Helpdesk & End‑User Support*** Serve as the primary point of contact for all technology support issues, delivering Tier 1–3 support through the ticketing system, in‑person requests, and remote support tools* Own the full onboarding and offboarding process, including account provisioning/deprovisioning, hardware preparation, device assignment, application access setup, and end‑user training* Maintain accurate logging and tracking of all support requests in the Zendesk ticketing system, ensuring proper categorization, documentation, and follow‑through* Build, image, configure, and deploy laptops and mobile devices, ensuring consistent baselines, security compliance, and proper enrollment into Intune and endpoint management systems* Install, diagnose, repair, maintain, and upgrade hardware, software, peripherals, mobile devices, and printers to ensure optimal performance and reliability* Support workstation and office equipment, including docking stations, monitors, webcams, headsets, and other peripherals, ensuring proper configuration and connectivity* Provide comprehensive mobile device support, including iOS/Android troubleshooting, MDM enrollment via Intune, device policies, email setup, and coordination with mobile carriers such as Verizon and AT&T for activations, line changes, SIM swaps, and service escalations* Create and deliver end‑user training, documentation, and user guides, including onboarding materials, and process documentation* Support the firm’s document library and data workflows, including permission issues, collaboration needs, structured storage, access troubleshooting, and content‑related support* Provide support for SaaS and line‑of‑business applications, including access issues, SSO troubleshooting, permissions, and vendor escalations* Identify patterns and recurring support issues,
#J-18808-Ljbffr