Integrated Dermatology is a leading national dermatology practice that acquires and partners with dermatology practices across the United States.  The culture at ID is a reflection of its people. Our environment is filled with hard-working, dynamic individuals who come together to ensure the success of our partner dermatologists.

Position Summary:

The Systems Administrator is responsible for the day-to-day administration, maintenance, configuration, and support of Integrated Dermatology's Microsoft 365 ecosystem, endpoint-management platforms, identity services, collaboration tools, and business-critical technology systems. This position serves as a primary operational owner of Microsoft 365, Entra ID, Exchange Online, Microsoft Teams, SharePoint Online, Intune, device-management, and SaaS platforms that support corporate users and practice locations across the organization. The Systems Administrator ensures systems remain secure, available, properly configured, and aligned with organizational standards while providing advanced support for escalated technical issues.

Working closely with Infrastructure Engineers, Security Engineers, Practice Operations Engineers, business stakeholders, vendors, and managed service providers, the Systems Administrator supports user lifecycle management, endpoint administration, identity management, mobile-device administration, collaboration services, software deployment, licensing, and platform governance. This role is responsible for maintaining operational documentation, supporting technology initiatives and acquisitions, administering platform configurations, improving automation and operational efficiency, and delivering a reliable technology experience for physicians, practice administrators, clinical staff, and corporate employees throughout the organization.

• Administer SharePoint Online and OneDrive for Business, including site administration, permissions, document libraries, retention settings, sharing controls, storage management, governance standards, and collaboration services.
• Manage Intune configuration, device enrollment, compliance policies, application deployment, patching, endpoint security, and Autopilot processes. 
• Administer Exchange Online including mailbox management, shared mailboxes, distribution groups, mail flow configuration, email security settings, and message-tracing activities. 
• Maintain Windows servers, Azure virtual machines, Azure Virtual Desktop environments, backups, DNS, DHCP, certificates, and hybrid connectivity where applicable.
• Provide Tier 2 escalation support, assist with complex technical incidents, and perform root-cause analysis for recurring operational issues.
• Administer Microsoft Entra enterprise applications, including single sign-on (SSO), Security Assertion Markup Language (SAML), OpenID Connect (OIDC), SCIM provisioning, user-access assignments, application integrations, and identity lifecycle management for approved business applications.
• Support Microsoft 365 governance initiatives including retention policies, collaboration standards, access reviews, lifecycle management, and platform configuration standards.
• Administer Microsoft Teams including policies, voice and meeting configurations, external access, resource accounts, Teams governance, lifecycle management, and troubleshooting.
• Manage employee onboarding, offboarding, account maintenance, licensing assignment, group memberships, shared mailboxes, distribution lists, access requests, and identity lifecycle processes.
• Administer Microsoft Intune and mobile-device-management platforms including device enrollment, compliance policies, configuration profiles, application deployment, endpoint security baselines, and mobile device lifecycle management.
• Administer and support business applications and SaaS platforms through user provisioning, role assignments, SSO integrations, troubleshooting, documentation, and vendor coordination.
• Develop and maintain basic PowerShell scripts, automation workflows, and administrative processes to improve operational efficiency and reduce manual effort.
• Develop and maintain technical documentation, knowledge base articles, administrative procedures, configuration standards, and operational runbooks.
• Maintain monitoring, alerting, asset inventory, system documentation, access reviews, and operational runbooks. 
• Support practice onboarding, technology transitions, vendor coordination, and site remediation activities. 

• Execute approved changes using disciplined change control and validate service health after implementation. 

• Hands-on experience with Windows 11, Microsoft 365, macOS device support, Entra ID, Intune, Teams, SharePoint, Ubiquiti networking, SonicWall firewalls, and TCP/IP troubleshooting.
• Advanced administration experience with Microsoft 365 including Exchange Online, Teams, SharePoint Online, OneDrive, licensing, mail flow, collaboration services, and governance controls.
• Experience administering Microsoft Intune, Autopilot, mobile device management (MDM), endpoint compliance policies, application deployment, and device lifecycle management.
• Experience administering SharePoint Online permissions, document libraries, site collections, collaboration services, external sharing controls, and governance policies.
• Experience administering Microsoft Teams policies, governance controls, meeting configurations, external access, resource accounts, and collaboration features.
• Experience administering Entra ID, Conditional Access, multifactor authentication, self-service password reset, identity governance, and user lifecycle processes.
• Strong communication and customer-service skills with the ability to effectively support physicians, practice administrators, corporate departments, executive leadership, and technical teams.
• Experience implementing and supporting enterprise application integrations using Microsoft Entra ID, including SSO, SAML, OIDC, SCIM provisioning, application assignments, lifecycle management, and federation technologies.
• Experience integrating and administering third-party SaaS platforms including user provisioning, deprovisioning, identity federation, role-based access control, and directory synchronization.
• Strong understanding of TCP/IP, DNS, DHCP, VPN, Wi-Fi, firewalls, endpoint management, and identity security.  
• Experience supporting geographically distributed users and coordinating with carriers, vendors, and managed-service partners. 
• Strong troubleshooting, documentation, prioritization, and communication skills. 
• Ability to participate in scheduled maintenance and an on-call rotation for critical systems.

Job Type:

• Full-time
• #LI-HYBRID

Experience:

• 4+ years administering Microsoft 365, Entra ID, Microsoft Teams, SharePoint Online, Intune, Windows endpoints, identity-management, device-management, and SaaS platforms in a multi-site environment.

Education:

• Associate degree required; bachelor’s degree in information technology or a related field preferred. Equivalent experience may be considered.

Certifications/Licenses:

• Microsoft Endpoint Administrator Associate or Azure Administrator Associate preferred; CompTIA Network+ or Security+ a plus.

Integrated Dermatology and it's entities provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.