IT Administrator

Andrea Kosta  [12:20 PM]

SunCore Digital is looking for an IT Administrator to build and own our internal technology foundation: identity and access, Microsoft 365, endpoint management and security, SaaS administration, and IT operations. We are an early-stage company, so this role begins by standing up the corporate IT environment from the ground up and then operating it as the company grows.
As our IT Administrator, you will own the Microsoft 365 tenant and Microsoft Entra ID as the company’s single identity provider, every company-managed endpoint, and the business applications our employees rely on. You will be the primary point of contact for internal technology operations, including account provisioning, device management, access controls, security enforcement, SaaS administration, and end-user support. You will work closely with Engineering, Security, Human Resources, and Leadership to maintain compliance, strengthen security practices, and support company growth. Production infrastructure, cloud environments, and deployment pipelines are owned by Engineering; this role owns corporate IT.
This is a hands-on role requiring strong technical problem-solving skills, excellent documentation practices, and a proactive approach to system reliability and security. This is a remote-first role with deferred compensation until 60 days post-MVP launch, plus equity, bonuses, and annual offsite perks. We value ownership, responsiveness, attention to detail, and continuous improvement.
What You’ll Do
Identity and Access:
• Own the Microsoft 365 tenant and Microsoft Entra ID as the company’s single identity provider
• Manage the full user lifecycle, including account creation, licensing, role and permission assignment, and timely deactivation, with documented onboarding and offboarding checklists
• Execute offboarding the same day as notice: block sign-in, revoke sessions, reassign mailbox and file ownership, remove SaaS access, and wipe company data from devices
• Implement and maintain least-privilege administration, including role-based access, just-in-time privileged access, and monitored break-glass accounts
• Enforce multi-factor authentication for all users, block legacy authentication, and design and maintain Conditional Access policies that require compliant devices for access to company data
• Federate Single Sign-On to all SaaS applications and implement automated provisioning and deprovisioning where supported
Microsoft 365 and Email:
• Administer Exchange Online, including mailboxes, shared mailboxes, distribution groups, mail flow rules, and retention
• Configure and enforce SPF, DKIM, and DMARC for all company sending domains
• Configure and manage email threat protection, including Safe Links, Safe Attachments, anti-phishing and impersonation protection, and external sender tagging
• Manage SharePoint and OneDrive sharing policies, data loss prevention rules, and third-party backup of Microsoft 365 data
Endpoints:
• Stand up and administer Microsoft Intune for Windows and macOS, including zero-touch enrollment through Windows Autopilot and Apple Business Manager for remote staff
• Define and enforce device compliance policies covering disk encryption, screen lock, operating system patch currency, host firewall, and removal of local administrator rights
• Deploy and manage antivirus and endpoint detection and response on every device by policy through Intune, with device compliance tied to Conditional Access
• Manage operating system and third-party application patching, with defined update rings and reporting
• Maintain hardware and software inventory, asset tracking, and device lifecycle, including shipping, return, and lost or stolen device procedures
SaaS, Data, and Vendors:
• Administer Slack, Zoom, HRIS platforms, and other SaaS business applications, including SSO enforcement, guest access, and retention settings
• Maintain a SaaS inventory with a named administrative owner for each application, and identify unsanctioned applications
• Deploy and administer a company password manager for all staff
• Coordinate with vendors and service providers regarding subscriptions, licensing, renewals, and support agreements
Security Operations and Compliance:
• Monitor identity, audit, and endpoint security logs for risky sign-ins, unauthorized access attempts, administrative changes, and configuration drift
• Own the technical controls that support SOC 2, including access reviews, device compliance, encryption, offboarding evidence, and change records for IT systems
• Conduct and document quarterly access reviews across all company systems
• Maintain and execute the account compromise and lost device response runbooks
• Run security awareness training and phishing simulations
• Support disaster recovery, backup verification, and business continuity processes
• Report technology risks, incidents, and infrastructure status directly to leadership
IT Operations and Support:
• Serve as the primary escalation point for employee technical support requests
• Create and maintain IT policies, procedures, knowledge base articles, and system documentation
• Recommend operational improvements that increase efficiency, security, and scalability
What You Bring
• 5+ years of experience in Information Technology, Systems Administration, or IT Support, including at least one environment you built or substantially rebuilt rather than inherited
• Strong hands-on experience administering Microsoft 365 and Microsoft Entra ID, including Exchange Online, SharePoint, and OneDrive
• Experience designing and operating identity and access management, including SSO federation, MFA, Conditional Access, role-based access, and privileged access management
• Hands-on experience deploying and administering Microsoft Intune, or an equivalent MDM platform, for both Windows and macOS, including zero-touch enrollment
• Hands-on experience deploying and operating endpoint protection and EDR platforms, such as Microsoft Defender for Business or Defender for Endpoint, CrowdStrike, or SentinelOne, by policy across a fleet
• Experience with endpoint patch management and vulnerability management
• Experience configuring email authentication (SPF, DKIM, DMARC) and email threat protection
• Proficiency with PowerShell for Microsoft 365 and Entra ID administration and automation
• Understanding of networking fundamentals, DNS, domain and certificate management, and identity-based access controls for a remote-first workforce
• Familiarity with compliance and security frameworks such as SOC 2, ISO 27001, or similar standards, including producing evidence for audits
• Strong troubleshooting and problem-solving skills with the ability to diagnose issues independently
• Experience documenting processes and maintaining accurate system records
• Excellent communication skills and ability to support technical and non-technical users
• Ability to prioritize multiple requests while maintaining attention to detail
• Bonus: Experience working in startups, remote-first organizations, fintech environments, or blockchain-related industries
• Bonus: Experience with compliance automation platforms, SIEM or log analytics tools, password manager administration, and Jamf
Required Certifications
Candidates must hold both of the following at the time of application:

1. At least one Microsoft administration certification from this list:

• Microsoft 365 Certified: Endpoint Administrator Associate (Exam MD-102)

• Microsoft Certified: Identity and Access Administrator Associate (Exam SC-300)

• Microsoft 365 Certified: AI Services Administrator Associate (Exam AB-650)

• Microsoft 365 Certified: Administrator Expert (Exam MS-102), accepted from current holders only

2. At least one security certification from this list:

• CompTIA Security+

• Microsoft Certified: Information Security Administrator Associate (Exam SC-401)

• Microsoft Certified: Security Operations Analyst Associate (Exam SC-200)

Preferred certifications:

• A second certification from either list above (MD-102 and SC-300 together cover the endpoint and identity scope of this role)

• CompTIA Network+

• ITIL 4 Foundation

• Apple Certified IT Professional or an equivalent macOS device management certification