We are looking for a Senior Microsoft Systems & Endpoint Administrator to support enterprise-level IT environments, focusing on endpoint management, identity and access management, and system administration activities. The role involves managing Microsoft ecosystems, ensuring secure access, supporting patching and update processes, and handling incident management and troubleshooting activities. You will work in a structured environment, supporting critical infrastructure and ensuring high availability, security, and compliance. Key Responsibilities - Administer Microsoft Endpoint Manager (Intune) and Windows Intune services - Manage Microsoft 365 applications, including authentication and authorisation services - Configure and maintain Conditional Access policies - Administer System Center Configuration Manager (SCCM) environments - Monitor Microsoft updates and plan patching or mitigation actions - Perform emergency patching and apply workarounds where required - Investigate incidents, identify root causes, and propose permanent solutions - Handle second-level incident management and resolution - Implement and manage Privileged Access Management (PAM) - Administer remote access solutions and connectivity - Manage application and audit logs - Maintain and update system documentation

• Supporting and enhancing our global Microsoft ERP platforms across Europe and the Americas • Collaborating with business, IT, and project teams to deliver system improvements and best-practice solutions • Participating in ERP upgrades, testing, deployments, and change management activities • Troubleshooting issues and ensuring a reliable, high-quality service for users worldwide • Contributing to our ongoing ERP transformation journey and continuous improvement initiatives

• Monitor and maintain the global IT infrastructure on a daily basis • Administer and support network environments (LAN/WAN) • Support the implementation of IT roadmaps and documentation • Deploy, configure, upgrade, and retire IT systems and equipment • Ensure the right balance between security and business agility • Implement monitoring tools and preventive measures for optimal performance • Manage Active Directory, Group Policies, and servers • Oversee user and computer account management processes • Manage security and distribution groups • Support patching and system upgrade processes • Collaborate closely with engineers and global IT teams • Ensure compliance with IT policies and security standards

Senior IT Systems Administrator - Denver, Colorado, US, 80216 - Information Technology - AGS1_ARIA_LABEL Hybrid" data-label="Flexibility:" id="header-tags1" token-data="JOB_DESCRIPTION.TAGS1" token-type="text">Hybrid - AGS2_ARIA_LABEL Full-Time" data-label="Position Type:" id="header-tags2" token-data="JOB_DESCRIPTION.TAGS2" token-type="text">Full-Time - Overview of Role Reporting to the IT Operations Manager, the Senior IT Systems Administrator is an individual contributor role responsible for maintaining and enhancing BOA&rsquo;s hybrid infrastructure environment, with an emphasis on network management, enterprise systems administration, and cybersecurity-driven project initiatives. This position supports a global organization from our Denver office and collaborates with international colleagues to ensure secure, reliable, and scalable infrastructure operations. The Senior IT Systems Administrator plays a key role in operational excellence and project execution, particularly as it relates to identity and access management, network security, and infrastructure modernization. This is a hybrid role based in Denver, CO. In-office attendance is generally expected 2&ndash;3 days per week. Occasional off-hours work is required to support scheduled maintenance windows, global collaboration, and urgent production issues. Core Responsibilities - Reflect and role model BOA&rsquo;s vision, values and Leadership Model and demonstrate passion for our mission across the IT team and rest of the organization - Administer and support BOA&rsquo;s hybrid infrastructure, including: - Microsoft 365 and Microsoft enterprise ecosystem - On-prem Active Directory and Microsoft Entra ID - Azure and AWS cloud environments - Windows Hyper-V and Proxmox virtualization platforms - Manage and enhance BOA&rsquo;s network and security infrastructure, including: - Fortinet firewalls and FortiClient VPN - Site-to-site connectivity across the Fortinet fabric - Switching, routing, VLAN configuration, and wireless access points - Network segmentation and secure remote access - Support and implement cybersecurity initiatives aligned with NIST Cybersecurity Framework (CSF) objectives - Administer endpoint management platforms: - Microsoft Intune (Windows and Android) - Iru (Apple devices) - Microsoft Defender for Endpoint - Support backup and disaster recovery operations using Veeam and contribute to ongoing reviews of RTO/RPO targets - Support infrastructure-related SOX controls, including change management, access reviews, and audit evidence collection - Support infrastructure asset lifecycle and software license management to ensure scalability and cost-effectiveness - Collaborate with third-party vendors and managed service providers, including security monitoring partners and network vendors - Continuously evaluate modern tools, automation opportunities, and industry best practices to enhance BOA&rsquo;s infrastructure maturity - Develop and maintain documentation for infrastructure architecture, processes, and standards - Provide escalation-level technical support to the IT Service Desk when required Required Qualifications - 5+ years of experience in Systems Administration or Infrastructure Engineering within a hybrid enterprise environment - Strong experience managing enterprise networking and firewall platforms, including routing, VLANs, switching, and secure remote access - Experience administering Microsoft 365 and Entra ID - Experience with public cloud platforms (Azure and/or AWS) - Solid understanding of cybersecurity fundamentals and infrastructure hardening principles - Experience managing multi-OS environments (Windows, macOS, and Linux) - Strong troubleshooting skills with the ability to diagnose issues across network, server, cloud, and endpoint layers - Excellent communication skills and ability to collaborate across global teams - Highly organized with the ability to manage competing priorities in a dynamic environment Desired Qualifications - Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related technical field preferred - Relevant industry certifications are highly valued, including but not limited to: - Microsoft certifications (e.g. Azure Administrator Associate, M365 Administrator, etc) - Networking certifications (e.g. Cisco CCNA or equivalent) - Security certifications (e.g. CompTIA Security+, Microsoft Security certifications) - Cloud platform certifications (e.g. AWS Certified Solutions Architect, Azure Administrator) Overview of Compensation and Benefits - Budgeted salary range: $102,000 - $112,000 - We will determine salary based on skills and experience in relation to the function of the role, as well as equity to any other employees with similar experience in the same or similar role - This role is also eligible for a 10% annual bonus - Comprehensive healthcare plans including Medical, Dental and Vision - All plans include subsidization from BOA, with one option 100% subsidized by BOA</li> - BOA also funds HSA accounts for enrolled employees - 3 weeks PTO to start, paid family leave, sick leave, and volunteer time off - Matching 401K retirement plan - Annual cash benefits for fitness and products, and ability to earn cash benefits through health and wellness program - Eligibility for stock options within 6 months of employment - Scholarship opportunities for further education - Flexible working schedule that includes both days at home and days in the office when needed - Learning and development opportunities - Discounts on many outdoor gear brands - Dog-friendly office Flexibility at BOA&nbsp; - BOA is committed to the health and well-being of our employees, and to upholding our values which include caring for each other and for our community - At BOA we support both flexibility and connectivity - For the majority of the Denver team, a hybrid approach is taken with the option to use a mix of remote work, and in-office connection days on Tuesdays and Thursdays. Connection Days are where we&rsquo;re all encouraged to go into the office and reconnect, even if you do not need to access specific equipment or product to do your job. Staying connected is really important, both for your mental health and to continue fostering our amazing BOA community - Some roles will require 4-5 days/week in the office if access is needed to product, equipment, specialized technology etc. We will review any job-specific requirements during the interview process