Job Description

Summary:

We’re seeking a hands-on System Administrator to support our traditional services offices and frontline teams while administering and securing our Microsoft 365, Datacenter and Azure environments. You will be the go‑to owner for escalated endpoint management, identity and access, collaboration services, and day‑to‑day infrastructure operations. The ideal candidate blends excellent customer service for office users with strong Microsoft cloud skills (Entra ID/Azure AD, Intune, Exchange Online, SharePoint/OneDrive, Teams, Defender, and Purview). This role collaborates closely with all business lines within our—such as eDiscovery, Court Reporting, Record Retrieval/Subpoena, and Legal Staffing and traditional services—ensuring reliable technology for time‑sensitive client work.

Responsibilities:

Traditional Services Office & End‑User Support

• Provide Tier 2/3 support for office staff (Windows/macOS, printers/scanners, conference rooms/Zoom/Teams Rooms, VoIP, and line‑of‑business apps).
• Maintain site technology basics (switches/APs, cabling vendors coordination, ISP issues, VPN, secure Wi‑Fi) and document site standards/runbooks.
• Coordinate new office moves, expansions, and equipment lifecycle for traditional services teams.

Microsoft 365 Administration

• Identity & Access: Manage Entra ID (Azure AD) including Conditional Access, security defaults, RBAC/PIM, app registrations, and SSO.
• Collaboration: Administer Exchange Online, Teams, SharePoint/OneDrive (sites, sharing, retention, transport rules, mailbox policies).
• Endpoint Management: Own Microsoft Intune for Windows/macOS/iOS/Android (enrollment, Autopilot, compliance, security baselines, app packaging, reporting). Lead staged rollouts per the Intune program plan.
• Security: Operate Microsoft Defender (Endpoint/Identity/Email) alerts and tuning in partnership with Security. Support Microsoft Purview (DLP, labeling, Insider Risk) configuration and adoption.

Azure Administration

• Support Azure subscriptions/resource groups with least‑privilege RBAC and policy guardrails; assist with storage, backup, and monitoring fundamentals.
• Partner with Security on Conditional Access signals, log analytics, and alert routing to improve detection and response.

Joiner–Mover–Leaver (JML) Execution

• Execute onboarding, role changes, and offboarding tasks in line with policy (accounts, licenses, access reviews, device handoff/collection, attestations) and keep checklists current.

Service Management, Documentation & Projects

• Work tickets to SLA, perform root‑cause analysis, and maintain high customer satisfaction.
• Create/update SOPs, diagrams, and knowledge articles that enable first‑call resolution by the Service Desk.
• Deliver small/medium projects (e.g., Intune enrollment waves, Purview rollout, Conditional Access hardening) on time with clear communications to stakeholders.

Qualifications:

• 4+ years in systems administration or endpoint/cloud operations supporting multi‑site professional services or similar fast‑paced environments.
• Hands‑on experience administering Microsoft 365 (Entra ID/Azure AD, Exchange Online, SharePoint/OneDrive, Teams) and Intune (enrollment, compliance, Autopilot, app deployment).
• Practical knowledge of Conditional Access, MFA, RBAC/PIM, and data protection controls (DLP/labeling) in Microsoft Purview.
• Solid Windows 10/11, macOS, and mobile (iOS/Android) administration; PowerShell proficiency for automation.
• Networking fundamentals (DNS/DHCP, VLANs/Wi‑Fi, VPN) and troubleshooting across the stack (device → network → cloud app).
• Clear, empathetic communicator who can translate technical topics for non‑technical users in office settings.
• Periodic travel to offices for projects, hardware lifecycle, and incident response (estimate 10–20%; adjust as needed).
• Participate in an after‑hours/on‑call rotation for critical incidents and maintenance windows.

Preferred Qualifications (Nice to Have)

• Certifications: MS‑102, AZ‑104, SC‑300/SC‑400, MD‑102, ITIL v4 Foundation.
• Experience with Microsoft Defender suite, Log Analytics/KQL, and Sentinel or comparable SIEM.
• Exposure to eDiscovery/legal industry tooling or other regulated professional services environments.

The Compensation range for this role is $105,00-$115,000 USD per hour and may be eligible for a bonus. Actual compensation within that range will be dependent upon the individual's location, skills, experience and qualifications.

What We Offer

• People-Focused Culture

• Competitive Pay & Quarterly Incentives

• Comprehensive Benefits, 401k & Wellbeing Programs (link for details)

• Flexible Time Off & Remote Work Options

• Professional Development & Career Growth Opportunities

• Exposure to cutting-edge technology in the legal services industry

Array is committed to providing equal employment opportunities to all individuals. We ensure that all hiring decisions are made without unlawful consideration of any person's race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, veteran status, disability, genetic information, marital status, citizenship, ancestry, or any other basis protected by applicable local, state, provincial, or federal law.  We are dedicated to making our application process accessible. If you require an accommodation or assistance due to a disability, please notify us. Your request will be handled confidentially, and your application status will not be negatively affected.  We strive to maintain a diverse, inclusive, and fair workplace where all team members are valued and respected.

All persons hired will be required to complete a comprehensive background check and provide proof of eligibility to work in the country of the job location.