The IT Systems Administrator supports Penfield's technology operations by managing daily system performance, maintaining cloud and network infrastructure, and ensuring secure, reliable access to organizational systems. This role serves as the primary hands-on administrator for Microsoft 365, hybrid Active Directory, Ubiquiti UniFi, Fortinet security systems, and Windows/Linux servers. The IT Systems Administrator independently handles technical issues, implements system updates, and provides Tier 1-3 support while collaborating closely with the Director of Information Services to keep systems stable, secure, and aligned with organizational needs. This position is ideal for a highly capable technician who enjoys ownership, problem-solving, and working as the operational backbone of a small, efficient IT team.

Cloud & Microsoft 365 Administration

• Administer Microsoft 365 services (Exchange Online, SharePoint, OneDrive, Teams, and Entra ID) to ensure secure, reliable access for all staff.
• Manage user provisioning, licensing, groups, permissions, MFA, and conditional access policies.
• Configure and maintain Microsoft Intune and Apple Business Manager for device enrollment, configuration, compliance, and endpoint security.
• Maintain cloud security settings, retention policies, and data protection tools including Purview DLP, sensitivity labels, and message encryption.

Network & Security Infrastructure (Ubiquiti UniFi and Fortinet)

• Maintain UniFi switches, access points, VLANs, and RADIUS authentication to support stable network performance.
• Administer FortiGate firewall policies, VPN access, and security configurations.
• Manage UniFi Protect surveillance systems and UniFi Access door control systems, including credentials, schedules, and retention settings.
• Troubleshoot network issues independently and maintain accurate documentation.

Server & Systems Administration

• Maintain Windows Server and Linux systems including patching, updates, and security hardening.
• Administer on-premises Active Directory, Group Policy, DNS, and DHCP, and maintain hybrid identity synchronization with Entra ID through Entra Connect.
• Manage the Proxmox virtualization environment and support planned server hardware upgrades.
• Monitor system health and performance; maintain backup and disaster recovery procedures.
• Administer Huntress EDR and Action1 RMM for endpoint protection, patching, remote support, and automation via PowerShell.
• Support the 3CX SBC, Telnyx VoIP, printer server and copier fleet.
• Maintain administrative credentials in Keeper according to security practices.

Helpdesk & User Support

• Provide Tier 1-3 support for hardware, software, and network issues with strong follow-through.
• Support Microsoft 365 applications including Outlook, Teams, and SharePoint.
• Maintain helpdesk ticketing workflows, documentation, and ticket resolution standards.
• Provide staff training, create knowledge base resources, and administer KnowBe4 security awareness training.

IT Operations & Projects

• Assist with IT projects, upgrades, migrations, and new system implementations.
• Manage IT asset inventory, procurement, and lifecycle processes.
• Coordinate vendor support cases and maintain positive vendor relationships.
• Support HIPAA Security Rule compliance through security controls, audit log review, incident response support, and documentation for risk assessments and NIST-aligned gap assessment.
• Participate in business continuity and disaster recovery planning.
• Perform other duties as assigned.

 

• 5+ years of IT systems administration experience supporting cloud, network and server environments.
• Hands-on Microsoft 365 experience including Exchange, SharePoint, Teams, Entra ID
• Experience with virtualization platforms (Proxmox, VMware, Hyper-V, or similar.)
• Bachelor’s degree or equivalent experience in IT, Computer Science, or related field.

• Ubiquiti UniFi experience with switches, access points, VLANs, and gateways strongly preferred.
• Experience with IP-based cameras and physical access control systems (UniFi Protect and UniFi Access).
• Experience in HIPAA or regulated environments supporting security controls and compliance workflows.
• Experience with EDR/RMM tools such as Huntress, Action1, or similar.
• Experience managing Apple devices through Apple Business Manager and Intune.
• Relevant certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, CompTIA Security+, CompTIA Network+, or similar.

• Windows Server proficiency with working knowledge of Linux systems for mixed-environment support. 
• Ubiquiti UniFi proficiency including switches, access points, VLANs, and authentication workflows.
• Proficiency with enterprise network equipment, including managed switches, wireless access points, VLANs, and network authentication such as RADIUS.
• Networking fundamentals including TCP/IP, DNS, DHCP, VLANs, routing, and firewall management.
• PowerShell automation for scripting, task automation, and system administration.
• Technical communication with ability to explain concepts clearly to non-technical users.
• Independent work style with the ability to manage priorities and follow through without close supervision.
• Troubleshooting and problem-solving with strong analytical skills and persistence.

• Additional scripting skills (Python or Bash) for automation, integration, and workflow improvements.
• Basic SQL; ability to run basic queries for reporting, troubleshooting, or systems intelligence. 
• Ability to learn new systems quickly, adapt to evolving technology needs, and stay current with best practices.

• Must meet all required health and safety clearances in accordance with Penfield Children’s Center policy, including an annual flu vaccine and tuberculosis test.
• Ability to stand, walk, sit, bend, stoop, kneel, crouch, and squat frequently throughout the workday.
• Ability to lift, carry, push, or pull up to 25 pounds, with or without reasonable accommodation, and 50 pounds with assistance.
• Ability to view computer screens, read printed materials, and accurately process written information.
• Ability to sit for extended periods while working at a desk or computer workstation.

This job description is not designed to cover or contain a comprehensive listing of all activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.

Penfield Children’s Center is an Equal Opportunity Employer.