Senior Network System Administrator

1. IT Infrastructure Administration and Support
   1. Administration and implementation of IT Infrastructure including networks, servers, Microsoft tenant, Entra, Active Directory and more
   2. Setup and ensure LAN/WAN system and services are compliant with the organization’s guidelines and procedures including SD-WAN, VLAN segmentation, and secure remote connectivity
   3. Monitor and ensure LAN/WAN performance meet organizational needs including performance, resiliency, and traffic routing across distributed locations
   4. Maintain domain name registrations and certificates needed for organization’s operations including SSL certificates, SSO certificates, and expiration monitoring
   5. Configure email services – Microsoft Exchange Online or Server and Microsoft 365 software
   6. Ensure systems are properly configured and Operating Systems are updated and secure including endpoint compliance policies, patching, and device security baselines
   7. Provide IT support escalation for complex support issues related to IT systems, software, and hardware
   8. Track software usage and licensing to ensure legal compliance including Microsoft licensing, SaaS subscriptions, and vendor licensing portals
   9. Troubleshoot remote access connectivity issues including VPN, conditional access, and endpoint compliance-related access issues
2. Security
   1. Create, implement, enforce, and monitor security policies, strategies, and procedures to protect the data and systems of the organization
   2. Configure and maintain security for all aspects of the Microsoft tenant, domain, network, servers, email, software systems, and end-user computers
   3. Install, configure, and maintain enterprise security platforms including Fortinet (Fortigate, FortiClient, EMS, and related services), Microsoft security tools, and endpoint protection platforms
   4. Implement and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA) for all major software systems including enterprise application registration, SSO configuration, certificate lifecycle management, and identity governance
   5. Monitor, investigate, and respond to security events and alerts across systems including firewall, endpoint, and identity platforms
3. Telecommunications
   1. Support VOIP telecommunication system and on-going needs of organization
   2. Ensure voice and conferencing capabilities for headquarters and field operations is working properly and engage vendor for support and new services when needed
   3. Configure and troubleshoot mobile devices, connectivity, and integration to our software systems
4. Software Systems Administration
   1. Implement and oversee Security Administration of major software systems used by organization
   2. Administer and support cloud-based SAAS platforms, CRM and ERP systems used across the organization including integration with SSO, user provisioning, and access control
   3. Utilize Intune to secure, control and manage organizational devices and applications including Autopilot deployment, Win32 application packaging, compliance policies, and device lifecycle management
   4. Administer all Microsoft 365 systems such as Teams, Sharepoint, OneDrive, etc. including security configuration, sharing controls, and governance policies
   5. Automate system administration tasks using scripting and modern tooling (PowerShell, APIs, or equivalent)
   6. Research and implement integrations between enterprise systems to improve efficiency and security
   7. Complete training or self-study to gain knowledge and/or certifications for new software systems to ensure proper administration and security
   8. Research and implement innovative and automated approaches for system administration tasks and operational efficiencies that will save time and effort including scripting, automation, and process optimization
   9. Lead and guide vendor engagement for enhanced services and support of systems
5. Printing & Scanning Solutions
   1. Manage network printers and multi-functional printers, and printing services including cloud printing systems
   2. Interface with vendors to ensure equipment is serviced and supported
6. Documentation and Training
   1. Maintain detailed documentation of network and system configurations
   2. Create standard operating procedures and best practices
   3. Communicate and train staff and ITS team members on IT Infrastructure and Systems
7. Data Backup Services
   1. Manage data backups of critical systems and maintain offsite/cloud data storage including cloud backup platforms and protection against data loss or ransomware
   2. Test and verify data backups; perform restoration tasks and minimum annual restoration test including periodic validation of restore procedures and recovery timeline
8. Other
   1. Remain current with industry related technology standards and best practices
   2. Participate in strategy planning and implement solutions for new or improved IT infrastructure and software systems
   3. Vendor management for outsourced services and support of IT systems
   4. Lead projects and assignments to support the overall IT strategic plan
   5. Complete or participate in annual audits of IT Systems, Infrastructure and Security
   6. Occasional travel may be required
9. Other duties and projects assigned by supervisor to support department and organizational needs

• Must possess a vibrant personal relationship with Jesus Christ and agree with the Joni and Friends statement of faith
• Desire to serve in a growing and dynamic Christian service ministry
• Bachelor’s degree in Computer Science or Information Technology OR Associate’s degree and 3-5 relevant IT Certifications required
• 5+ years of complex network and system administration work experience required
• Three or more IT certifications related to administration of Microsoft services, Identity Management, Network Services, IT/Cyber Security, CRM or ERP systems are required
• Strong experience with Microsoft Entra ID (Azure AD), including Conditional Access, SSO, and identity governance
• Experience managing firewall and network security platforms, preferably Fortinet (FortiGate, EMS, and FortiClient)
• Experience with endpoint management using Microsoft Intune, including device provisioning and application deployment
• Proven proficiency in network, system and server administration including server virtualization and management of cloud services is required
• Working knowledge and experience implementing and supporting Microsoft Active Directory and Microsoft Entra ID (Azure AD) in a hybrid and/or cloud-first environment is required
• Experience with security monitoring, log analysis, and incident response across identity, endpoint, and network systems
• Experience with scripting or automation (PowerShell or equivalent) strongly preferred
• Expert knowledge of networking concepts, protocols and security is required
• Knowledge and 3+ years’ experience supporting VOIP telecommunications systems and mobile device configuration is required
• The ability to install and upgrade hardware systems, learn new software systems, train others to use the systems and coordinate multiple projects simultaneously is required
• Ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines is required
• Good judgment required in recognizing and maintaining confidentiality of sensitive information
• Must enjoy working with others in a team environment and be flexible to meet the requirements of the department and ministry
• Must be dependable, cooperative, flexible, and exhibit enthusiasm and initiative
• Must support a flexible schedule and work evening/weekend hours when needed
• Good interpersonal communication skills both verbal and written and the ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines are necessary
• Must be detail oriented, committed to accuracy, a collaborator and self-starter who is flexible and able to work independently
• Must demonstrate a keen sense of confidentiality
• Strong general computer skills are necessary along with a competent, working knowledge of Windows, Microsoft Excel, Microsoft Word, Microsoft Outlook, and the Internet
• Understanding of Christian ministry and specifically Joni and Friends is desirable

EMPLOYEE MINISTRY ENGAGEMENT:

Joni and Friends is a Christ-centered community. Therefore, we expect every employee at Joni and Friends to excel in their walk with Christ and in their specific employment role in our Christian community. We purposely create a gospel-centered environment and offer leadership and development training to help employees perform their work with integrity and excellence, serving in our Christian community at Joni and Friends to fulfill our religious ministry: to share the gospel and serve people living with disabilities.

All employees do this, regardless of their specific role, by:

• Modeling Joni and Friends’ Christian beliefs and practices to advance our gospel mission during working hours and nonworking hours
• Supporting fellow staff and volunteers at Joni and Friends in following Christ, by praying for each other, sharing Scripture and setting an example of how to live a faithful Christian life
• Engaging in the lives of people living with disabilities with love, dignity, and in a manner that commends and proclaims the gospel.
• Participating or leading in prayer and worship during meetings, events, and outreaches
• Affirming the Joni and Friends Statement of Faith annually and not engaging in any conduct or promoting any religious beliefs inconsistent with such beliefs
• Upholding and advancing Joni and Friends’ Mission and Vision through a focus on our Values.
• Actively attending a church that has a statement of faith that does not contradict Joni and Friends’ Statement of Faith

Joni and Friends seeks to glorify God in the way we conduct ourselves, and in the work we do together as a Christian community. Employment at Joni and Friends is not only a job but a ministry and a calling from God.