Systems Administrator – M365 & IT Systems at ADvTECH

Overall Purpose of the Job:

• Responsible for the day-to-day administration of M365 and IT Systems.  Configuration programming, installation, and support of Advtech IT architectures and related services for the enterprise. Monitors performance and maintains systems and servers according to requirements ensuring they work effectively.
• Identifies and resolves all hardware and software technical problems and malfunctions related to the system operations and underlying hardware. Escalate business process problems to the accountable system, owner.
• Advises team leader in the areas of performance analysis, problem-solving, and infrastructure and system planning, with the potential to affect the successful execution of business transactions. Ensures a stable performance environment for the business processing system.
• Provides reports and metrics relating to overall systems health, to improve system availability and performance, thus providing a holistic management view and recommendations to alleviate pre-empty and avoid potential issues.

Responsibilities for this Position:

Administration Windows Server:

• Administration of Physical or Virtual Windows Server from provisioning, through operations to decommissioning according to Group standards.
• Proactively perform regular maintenance and performance monitoring of Windows Server, which includes resource management, software updates and repairs when system errors occur.
• Optimise processes and drive process improvement to increase performance and reduce costs.
• Troubleshoot and facilitate any hardware repairs and/or upgrades in co-operation with support vendors.

Administration Active Directory:

• Administer the On-Premises Identity for Group Admin Staff (all contract types), Schools Students and Tertiary Students.
• Administer on-premises and cloud Windows Desktop computers within Active Directory in collaboration with Site ICT.
• Perform regular Active Directory audits that includes stale user/computer object clean-ups and access rights management.
• Monitor and Maintain standards for installations of Microsoft Windows Operating System technology including AD Forests, Microsoft Entra ID, Domains, Trusts, DNS, Group Policy and Organizational Units.
• Create and update technical documentation of operating procedures as needed.

Administration of LAN WAN Infrastructure:

• Troubleshoot and monitor campus networking equipment, which includes firewalls, switches, Wi-Fi, and broadband equipment and escalate to partners/providers.
• Administer and troubleshoot URL/Application block/allow configuration on campus firewalls as required by business while maintaining a secure environment.
• Monitor and maintain standards at campus level server rooms and cabling cabinets.

Administration of IT Systems:

System Center Orchestrator:

• Utilize Orchestrator to improve efficiency and reduce operational costs to support cross-departmental objectives.
• Utilize Orchestrator to provide extensible integration for custom in-house solutions, using the Orchestrator Integration Toolkit.

System Center Configuration Manager:

• Utilize SCCM for Windows and package deployment
• Maintain Windows Endpoint Updates via SCCM

Microsoft Intune (Modern Endpoint Management):

• Administer Microsoft Intune for device enrolment, compliance policies, configuration profiles, and app deployment across Windows, iOS, and Android endpoints.
• Manage Conditional Access integration between Entra ID and Intune to enforce device compliance as a condition of resource access (Zero Trust model).
• Support co-management workload transition from SCCM to Intune; manage Windows Update for Business rings and software package deployment via Intune.

System Center Operations Manager / Azure Monitor:

• Ensure all servers report into SCOM.
• Monitor and maintain alerts for services monitored by SCOM and Azure Monitor; escalate and resolve service health incidents in line with SLA requirements.

Office 365 Team Administration of Office 365 Identity:

• Administer the Office 365 – Identity for Group Admin Staff (all contract types), Schools Students and Tertiary Students.
• Perform regular Microsoft Entra ID audits that includes stale user/computer object clean-ups, access rights management, and review of Conditional Access policies to enforce Zero Trust principles.
• Create and update technical documentation of operating procedures as needed.
• Assist Team leader with Problem Management.

Office 365 Team Administration of Office 365 Messaging:

• Administer Office 365 – Messaging (including hybrid configuration) for Group Admin Staff (all contract types), Schools Students and Tertiary Students.
• Monitor and Maintain standards and installations of Microsoft Messaging Solutions which includes Microsoft Exchange Server.
• Perform regular Audits within the messaging platform that includes reviews of Global Address Lists, Mailbox Usage, Mailbox Delegation, Mailbox Rules & Autoresponders, Distribution Lists and Contacts.
• Create and update technical documentation of operating procedures as needed.
• Assist Team leader with Problem Management.

Office 365 Team Administration of Non-Microsoft SaaS (Software as a Service) Applications:

• Administer Non-Microsoft SaaS (Software as a Service) Applications (Mimecast) which includes, but are not limited to Audit logs, Message Tracking & Troubleshooting, Managed Senders as well as Held Queue processing.
• Follow and apply configuration and security standards and policies within the defined Change Management process.
• Escalation point for TheMarshal Support Staff.
• Create and update technical documentation of operating procedures as needed.
• Assist Team leader with Problem Management.

Office 365 Team Administration of Office 365 Security:

• Defender for Endpoint:
• Administer lifecycle which includes identifying, on/offboarding, service health and removal of endpoints.
• Respond to security incidents as required by the Security/SOC Team.
• Defender for Office:
• Administration of Email & Collaboration space in Defender, which includes incidents, threat removal, quarantined messages, restricted users, and others.
• Cloud app security incidents on instruction of the Security/SOC Team.

Office 365 Team Administration of Office 365 Document Management and Storage Systems:

• SharePoint-Online and One Drive:
• Ensuring the operational health of the SharePoint online environment including security, availability, performance, interoperability, and reliability.
• Maintenance/sustainment of existing client SharePoint sites and subsites, lists, libraries, and content (including pages, workflows, and items).
• Administration, support and configuration of SharePoint Online within the Microsoft Office 365 Admin Platform.
• Administer changes to the configuration, including Change Requests for discussion and approval by CAB.
• Administer the 365 Admin settings from the SharePoint Admin Center. Settings include (Create and administer Site Collections, administer Global Settings, Assign and Administer Site Collection Administrators, administer Site Collection storage limits, recover content from the Recycle bin and administer SharePoint Online user Profiles).
• Training and educating end-users on O365 capabilities and collaboration tools (OneDrive, Teams, OneNote, Outlook, etc).
• Assist in data Migrations from local resources to SharePoint Departmental locations.
• Conduct routine monitoring and analysis to include Audit Log Reports evaluation, system, and storage utilization reports, site and system usage, growth reports, and manage site collection quota settings.
• Feedback on Services Uptime and Performance.
• Office 365 Team Administration of Office 365 Applications:

Teams:

• Administer all aspects of Microsoft Teams and Support.

Planner:

• Administer Planner settings for the Shared Tenant. This includes Turning Planner on or off, Control who can create plans, Control the email notifications.
• Restrict guests from Outside the network, Outlook Calendar sync, Reporting on usage.

OneNote:

• Administer all aspects of Microsoft OneNote and Support.

Office 365 Add-Ons:

• Administer and deploy Office 365 add-on applications like FindTime etc.

Microsoft 365 Copilot & Purview:

• Manage Microsoft 365 Copilot licensing and governance in the M365 admin centre, including controlling agent deployment and access via the Copilot Control.
• Administer Microsoft Purview for data classification, DLP policies, and information protection relevant to the education environment.

Schools Data Sync (SDS):

• Administer SDS components which includes SIS exports, data upload and sync jobs.
• Monitor SDS health daily and provide the SIS team reports on errors that may prohibit student imports.

Education:

• Degree / Diploma in IT.
• Microsoft 365 Certified: Fundamentals (MS-900) or Microsoft Certified: Identity and Access Administrator Associate (SC-300).

Experience:

• ICT industry experience of 3 to 5 years in the following roles;
• 2 Years of experience with LAN / WAN.
• 1 Year of experience with Systems Administration.
• 2 Years of experience with Problem Management.