Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this IT Administrator role.
Rezi rewrites your resume against SunCore Digital's job description. Free.
Tailor your resume to this IT Administrator role.
Rezi rewrites your resume against SunCore Digital's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the IT Administrator posting at SunCore Digital — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the IT Administrator posting at SunCore Digital — free, in seconds.
About the Role
SunCore Digital is seeking an IT Administrator to establish and manage the company's internal technology infrastructure, including identity and access, Microsoft 365, endpoint management and security, SaaS administration, and IT operations. This role involves building the corporate IT environment from the ground up and scaling it as the company grows.
Responsibilities
- Own the Microsoft 365 tenant and Microsoft Entra ID as the company’s single identity provider.
- Manage the full user lifecycle, including account creation, licensing, role and permission assignment, and timely deactivation.
- Execute same-day offboarding procedures including blocking sign-in, revoking sessions, reassigning assets, removing SaaS access, and wiping company data from devices.
- Implement and maintain least-privilege administration, including role-based access, just-in-time privileged access, and monitored break-glass accounts.
- Enforce multi-factor authentication for all users, block legacy authentication, and design and maintain Conditional Access policies.
- Federate Single Sign-On to all SaaS applications and implement automated provisioning and deprovisioning.
- Administer Exchange Online, including mailboxes, shared mailboxes, distribution groups, mail flow rules, and retention.
- Configure and enforce SPF, DKIM, and DMARC for all company sending domains.
- Configure and manage email threat protection, including Safe Links, Safe Attachments, anti-phishing and impersonation protection, and external sender tagging.
- Manage SharePoint and OneDrive sharing policies, data loss prevention rules, and third-party backup of Microsoft 365 data.
- Stand up and administer Microsoft Intune for Windows and macOS, including zero-touch enrollment.
- Define and enforce device compliance policies covering disk encryption, screen lock, operating system patch currency, host firewall, and removal of local administrator rights.
- Deploy and manage antivirus and endpoint detection and response on every device by policy through Intune.
- Manage operating system and third-party application patching, with defined update rings and reporting.
- Maintain hardware and software inventory, asset tracking, and device lifecycle.
- Administer Slack, Zoom, HRIS platforms, and other SaaS business applications.
- Maintain a SaaS inventory with a named administrative owner for each application, and identify unsanctioned applications.
- Deploy and administer a company password manager for all staff.
- Coordinate with vendors and service providers regarding subscriptions, licensing, renewals, and support agreements.
- Monitor identity, audit, and endpoint security logs for risky sign-ins, unauthorized access attempts, administrative changes, and configuration drift.
- Own the technical controls that support SOC 2, including access reviews, device compliance, encryption, offboarding evidence, and change records for IT systems.
- Conduct and document quarterly access reviews across all company systems.
- Maintain and execute the account compromise and lost device response runbooks.
- Run security awareness training and phishing simulations.
- Support disaster recovery, backup verification, and business continuity processes.
- Report technology risks, incidents, and infrastructure status directly to leadership.
- Serve as the primary escalation point for employee technical support requests.
- Create and maintain IT policies, procedures, knowledge base articles, and system documentation.
- Recommend operational improvements that increase efficiency, security, and scalability.
Requirements
- 5+ years of experience in Information Technology, Systems Administration, or IT Support, including at least one environment you built or substantially rebuilt rather than inherited.
- Strong hands-on experience administering Microsoft 365 and Microsoft Entra ID, including Exchange Online, SharePoint, and OneDrive.
- Experience designing and operating identity and access management, including SSO federation, MFA, Conditional Access, role-based access, and privileged access management.
- Hands-on experience deploying and administering Microsoft Intune, or an equivalent MDM platform, for both Windows and macOS, including zero-touch enrollment.
- Hands-on experience deploying and operating endpoint protection and EDR platforms, such as Microsoft Defender for Business or Defender for Endpoint, CrowdStrike, or SentinelOne, by policy across a fleet.
- Experience with endpoint patch management and vulnerability management.
- Experience configuring email authentication (SPF, DKIM, DMARC) and email threat protection.
- Proficiency with PowerShell for Microsoft 365 and Entra ID administration and automation.
- Understanding of networking fundamentals, DNS, domain and certificate management, and identity-based access controls for a remote-first workforce.
- Familiarity with compliance and security frameworks such as SOC 2, ISO 27001, or similar standards, including producing evidence for audits.
- Strong troubleshooting and problem-solving skills with the ability to diagnose issues independently.
- Experience documenting processes and maintaining accurate system records.
- Excellent communication skills and ability to support technical and non-technical users.
- Ability to prioritize multiple requests while maintaining attention to detail.
- Bonus: Experience working in startups, remote-first organizations, fintech environments, or blockchain-related industries.
- Bonus: Experience with compliance automation platforms, SIEM or log analytics tools, password manager administration, and Jamf.
- Must hold at least one Microsoft administration certification (Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, Microsoft 365 Certified: AI Services Administrator Associate, or Microsoft 365 Certified: Administrator Expert).
- Must hold at least one security certification (CompTIA Security+, Microsoft Certified: Information Security Administrator Associate, or Microsoft Certified: Security Operations Analyst Associate).
Skills
- Microsoft 365
- Microsoft Entra ID
- Identity and Access Management
- SSO Federation
- MFA
- Conditional Access
- Role-Based Access
- Privileged Access Management
- Microsoft Intune
- MDM
- Windows
- macOS
- Zero-touch enrollment
- Endpoint Protection
- EDR
- Microsoft Defender for Business
- Microsoft Defender for Endpoint
- CrowdStrike
- SentinelOne
- Patch Management
- Vulnerability Management
- SPF
- DKIM
- DMARC
- Email Threat Protection
- PowerShell
- Networking Fundamentals
- DNS
- Domain Management
- Certificate Management
- SOC 2
- ISO 27001
- Troubleshooting
- Problem-Solving
- Documentation
- Communication
- Prioritization
- Attention to Detail
- Startup Environments
- Remote-First Organizations
- Fintech
- Blockchain
- Compliance Automation
- SIEM
- Log Analytics
- Password Manager Administration
- Jamf
- Microsoft Administration Certification
- Security Certification
Location
- Remote
Work Type
- Remote-first
- Full-time
Experience Level
- 5+ years of experience
Education Level
- Microsoft administration certification
- Security certification
Salary/Compensations
- Deferred compensation until 60 days post-MVP launch
- Equity
- Bonuses
Benefits
- Annual offsite perks
About the Company
- SunCore Digital is an early-stage company.