Position Summary
The Systems Administrator is the hands-on owner of the organization's core infrastructure: servers, virtualization, identity, Microsoft 365, network, backup, and disaster recovery. The role keeps these systems secure, available, and examination-ready, and it moves them toward a zero trust, automation-friendly model as the organization modernizes. The role provides Tier 2 support for infrastructure, systems, and network issues escalated by IT Help Desk, and assists with desktop support as needed.
Reports to: IT Manager
Works closely with: IT Service Delivery, the AI & Security Specialist, Risk Management, and managed service and core vendors
Essential Functions
Infrastructure and virtualization
Administer and support Windows Server, Active Directory, DNS, DHCP, Group Policy, and supporting services.
Administer virtualization and storage platforms (currently VMware ESXi on shared storage) and support infrastructure refresh and migration projects, including a planned move to hyperconverged infrastructure.
Perform routine maintenance, including patching, firmware and software updates, capacity monitoring, and health checks, following established change management practices.
Support servers and platforms hosted in colocation facilities, including coordination with hosting providers.
Provide practical input on technology choices, including vendor evaluations, product trials, and implementation tradeoffs and influence infrastructure roadmaps.
Identity and Microsoft 365
Administer Microsoft 365, Entra ID, and Exchange Online, including Conditional Access, hybrid identity, and multi-factor authentication.
Support user lifecycle management (joiners, movers, and leavers), periodic access reviews, and cleanup of stale accounts and excess permissions.
Support profile management and logon performance improvements for end-user environments.
Network infrastructure
Administer, design, and support LAN, WAN, wireless, and internet connectivity across branch and office locations, including Cisco and Meraki switching, routing, wireless, and firewall equipment.
Plan and carry out network lifecycle work, including equipment refreshes, firmware upgrades, IP addressing, and capacity planning.
Manage carrier circuits and network service providers, including provisioning, outage escalation, and performance against service commitments.
Monitor network health and performance, maintain configuration backups, and troubleshoot connectivity, latency, and routing issues to root cause.
Administer firewall, remote access, network access control, and web filtering platforms.
Support the transition from traditional VLAN, ACL, and VPN-based access to zero trust network access, including policy administration, testing, and troubleshooting.
Backup, disaster recovery, and business continuity
Operate enterprise backup and recovery solutions and perform scheduled restore testing.
Support disaster recovery planning and annual testing with the disaster recovery provider, and document results in a form suitable for management and examiner review.
Help evaluate and implement changes to the disaster recovery and hosting model.
Security and compliance support
Apply and maintain system hardening baselines, logging, and monitoring, working with the AI & Security Specialist, who owns security policy and oversight.
Remediate infrastructure vulnerabilities within defined timelines and support endpoint protection, data protection, and file permission cleanup efforts.
Maintain secure configurations and provide technical documentation and evidence for audits and examinations.
Incident response
Serve as a technical responder in security and availability incidents, including containment, recovery, and documentation, and participate in annual incident response exercises.
Automation and documentation
Automate routine administration, provisioning, and evidence collection using PowerShell or similar scripting tools.
Maintain accurate infrastructure and network documentation, including configurations, procedures, and diagrams, in the designated documentation and topology system of record.
Support on-premises automation and AI platforms with hosting, access controls, backups, and monitoring, in line with the organization's governance requirements.
Projects, vendors, and recommendations
Own the success of infrastructure projects assigned by the IT Manager, such as infrastructure refreshes, network and access rollouts, and disaster recovery changes, including planning, budget and risk tracking, testing, cutover, and closeout with documentation and audit evidence.
Coordinate with managed service providers, core banking support vendors, and other third parties, including connectivity between core systems and external networks, and help hold vendors to service level commitments.
Research, test, and recommend infrastructure and security improvements to the IT Manager, with a clear summary of benefits, risks, and costs. The IT Manager makes final decisions on priorities, scope, budget, and vendor selection.
Support and on-call
Provide Tier 2 technical support for infrastructure, systems, and network issues escalated by IT Service Delivery, and assist with desktop and end-user support as needed.
Participate in an after-hours on-call rotation for critical incidents and outages.
Maintain strict confidentiality of member, employee, and institutional information.
Job Specifications
Required
At least 5 years of combined experience in systems, infrastructure, or network administration.
Hands-on experience with Active Directory and Windows Server environments.
Experience administering Microsoft 365, including Entra ID, Conditional Access, and Exchange Online.
Experience supporting virtualization platforms (VMware preferred; Hyper-V or Nutanix acceptable) and shared storage.
Strong working knowledge of networking fundamentals: DNS, DHCP, routing, switching, VLANs, VPN, firewalls, and wireless.
Hands-on experience administering and troubleshooting Cisco and Meraki switching, routing, wireless, and firewall equipment.
Experience supporting enterprise backup, monitoring, or endpoint management tools.
Scripting or automation experience, preferably PowerShell, Python, or Power Automate.
Experience in a security-sensitive or availability-critical environment.
Strong troubleshooting, documentation, and communication skills, including the ability to explain technical risk to non-technical staff and managers.
Willingness to participate in an after-hours on-call rotation.
Preferred Qualifications
Experience with hyperconverged infrastructure.
Experience with zero trust, secure web gateway, or microsegmentation platforms.
Experience with Cisco firewalls, network access control, and network monitoring tools.
Experience with SD-WAN, carrier circuit management, or multi-site network design.
Experience supporting examinations or audits in a financial institution or other regulated industry.
Familiarity with NIST CSF, FFIEC guidance, or NCUA requirements.
Experience supporting disaster recovery tests and producing documented results.
Relevant certifications such as CCNA, CCNP, Network+, Meraki, Microsoft, VMware, or Nutanix credentials.