Systems Administrator
Evans General Contractors, Alpharetta, GA, United States
The System Administrator is responsible for administering and enhancing Evans’ cloud‑centric IT infrastructure, ensuring secure, resilient, and scalable operations across Microsoft Azure, Microsoft 365, SaaS platforms, and endpoint ecosystems.
This role expands on the foundation of the Junior System Administrator position by adding deeper expertise in automation, security governance, infrastructure design, and cross‑department technical leadership. Reports directly to the
IT Manager .
Key Responsibilities
Manage, optimize, and troubleshoot Microsoft Azure services (VMs, storage, networking, virtual appliances, PIM, resource groups).
Oversee and improve cloud governance, cost management, security baselines, and resource tagging standards.
Maintain and enhance Microsoft 365, SharePoint, Teams, and core SaaS platforms.
Lead rollout of new cloud services, ensuring proper testing, validation, and documentation.
Identity, Access, and Security
Own Identity & Access Management (IAM) operations and design in Microsoft Entra ID.
Maintain and enhance Conditional Access, MFA enforcement, and Zero Trust posture.
Administer role‑based access controls (RBAC), PIM, privileged access policies, and access review cycles.
Support vulnerability remediation efforts across SaaS, endpoints, and cloud systems.
Lead the development and governance of Intune configuration profiles, compliance policies, device baselines, application deployments, and AutoPilot.
Monitor and enforce endpoint security compliance across the fleet.
Design and implement remediation scripts and automated enforcement policies.
Automation & Scripting
Build and maintain automation using PowerShell, Python, Logic Apps, and API integrations.
Reduce operational toil through automated provisioning, policy deployment, reporting, and lifecycle workflows.
Mentor junior team members on scripting best practices.
Serve as Tier 2 escalation for complex SaaS, identity, endpoint, and cloud issues.
Collaborate with cross‑functional teams to ensure operational continuity during incidents.
Documentation & Change Management
Maintain high‑quality documentation in Microsoft Loop for policies, SOPs, deployment guides, and architecture diagrams.
Ensure all changes are logged in Freshservice with proper testing, rollback plans, and CAB review when needed.
Conduct documentation and process reviews for junior staff.
Requirements
Bachelor’s degree in IT, Computer Science, or equivalent experience.
3–5 years in system administration, cloud administration, or advanced IT support.
Strong expertise in Microsoft Azure and Entra ID.
Proficiency in Microsoft Intune & device lifecycle management.
Solid understanding of networking fundamentals (DNS, subnetting, VPN, firewalls).
Proficient in PowerShell with working knowledge of Python.
Strong troubleshooting skills with ability to resolve complex cross platform issues.
Clear communicator skilled in documenting and explaining technical solutions.
Experience designing and enforcing Zero Trust policies preferred
Hands on experience with security tooling (EDR/XDR, SIEM, patching, vulnerability management) preferred
Experience with API integrations and automation frameworks preferred
Construction software expertise (Autodesk, TouchPlan, Bluebeam) preferred
Experience with Vista Viewpoint preferred
Microsoft Certified: Cybersecurity Architect (SC 100) preferred
Azure Solutions Architect Expert (AZ 305) certification preferred
Microsoft Certified: Identity & Access Administrator (SC 300) preferred
CompTIA Security+ certification preferred
ITIL Foundation v4 certification preferred
Evans General Contractors, LLC is an Equal Employment Opportunity Employer.
#J-18808-Ljbffr
This role expands on the foundation of the Junior System Administrator position by adding deeper expertise in automation, security governance, infrastructure design, and cross‑department technical leadership. Reports directly to the
IT Manager .
Key Responsibilities
Manage, optimize, and troubleshoot Microsoft Azure services (VMs, storage, networking, virtual appliances, PIM, resource groups).
Oversee and improve cloud governance, cost management, security baselines, and resource tagging standards.
Maintain and enhance Microsoft 365, SharePoint, Teams, and core SaaS platforms.
Lead rollout of new cloud services, ensuring proper testing, validation, and documentation.
Identity, Access, and Security
Own Identity & Access Management (IAM) operations and design in Microsoft Entra ID.
Maintain and enhance Conditional Access, MFA enforcement, and Zero Trust posture.
Administer role‑based access controls (RBAC), PIM, privileged access policies, and access review cycles.
Support vulnerability remediation efforts across SaaS, endpoints, and cloud systems.
Lead the development and governance of Intune configuration profiles, compliance policies, device baselines, application deployments, and AutoPilot.
Monitor and enforce endpoint security compliance across the fleet.
Design and implement remediation scripts and automated enforcement policies.
Automation & Scripting
Build and maintain automation using PowerShell, Python, Logic Apps, and API integrations.
Reduce operational toil through automated provisioning, policy deployment, reporting, and lifecycle workflows.
Mentor junior team members on scripting best practices.
Serve as Tier 2 escalation for complex SaaS, identity, endpoint, and cloud issues.
Collaborate with cross‑functional teams to ensure operational continuity during incidents.
Documentation & Change Management
Maintain high‑quality documentation in Microsoft Loop for policies, SOPs, deployment guides, and architecture diagrams.
Ensure all changes are logged in Freshservice with proper testing, rollback plans, and CAB review when needed.
Conduct documentation and process reviews for junior staff.
Requirements
Bachelor’s degree in IT, Computer Science, or equivalent experience.
3–5 years in system administration, cloud administration, or advanced IT support.
Strong expertise in Microsoft Azure and Entra ID.
Proficiency in Microsoft Intune & device lifecycle management.
Solid understanding of networking fundamentals (DNS, subnetting, VPN, firewalls).
Proficient in PowerShell with working knowledge of Python.
Strong troubleshooting skills with ability to resolve complex cross platform issues.
Clear communicator skilled in documenting and explaining technical solutions.
Experience designing and enforcing Zero Trust policies preferred
Hands on experience with security tooling (EDR/XDR, SIEM, patching, vulnerability management) preferred
Experience with API integrations and automation frameworks preferred
Construction software expertise (Autodesk, TouchPlan, Bluebeam) preferred
Experience with Vista Viewpoint preferred
Microsoft Certified: Cybersecurity Architect (SC 100) preferred
Azure Solutions Architect Expert (AZ 305) certification preferred
Microsoft Certified: Identity & Access Administrator (SC 300) preferred
CompTIA Security+ certification preferred
ITIL Foundation v4 certification preferred
Evans General Contractors, LLC is an Equal Employment Opportunity Employer.
#J-18808-Ljbffr