- Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation
- Analytics: deliver analytic applications & services that generate insight on how to measurably improve
- Expertise: provide clinical, financial & operational experts who enable & accelerate improvement
- Engagement: attract, develop and retain world-class team members by being a best place to work
Senior Systems Engineer / Microsoft Platform & DevOps Administrator
Position Summary
The Systems Engineer, Sr. is responsible for the design, implementation, automation, administration, and support of enterprise Microsoft cloud and on-premises infrastructure. This role serves as a technical lead for Microsoft 365, Entra ID, Intune, Azure, Active Directory, Okta integrations, automation initiatives, security compliance, endpoint management, and DevOps operational processes. The position focuses on improving operational efficiency through automation, strengthening security posture, and ensuring reliable delivery of enterprise technology services.
Core Responsibilities
Microsoft 365 Administration
- Administer Microsoft 365 services, including:
- Exchange Online
- Microsoft Teams
- SharePoint Online
- OneDrive for Business
- Microsoft Graph
- Manage provisioning, compliance, retention, and access controls.
- Implement and maintain Microsoft security best practices.
- Troubleshoot user access, authentication, and collaboration platform issues.
Identity & Access Management
- Manage Microsoft Entra ID (Azure AD) and hybrid identity environments.
- Administer Active Directory, Group Policy, LDAP, and identity synchronization.
- understand and maintain SSO integrations using Okta and SAML.
- Implement lifecycle management processes for onboarding, offboarding, and access reviews.
- Manage privileged access and role assignments.
- Develop automated account cleanup and governance processes.
Endpoint Management
- Administer Microsoft Intune and endpoint security policies.
- Manage Windows device enrollment, configuration, compliance, and patching.
- Lead device migrations and modernization initiatives.
- Deploy security baselines and endpoint protection controls.
- Maintain Windows Hello for Business and modern management solutions.
- Support macOS and Windows endpoint administration.
Azure Infrastructure Administration
- Deploy and manage Azure virtual machines and cloud resources.
- Maintain Azure storage, networking, Key Vault, and resource groups.
- Manage Azure encryption, backup, disaster recovery, and security controls.
- Implement infrastructure modernization initiatives.
- Monitor cloud utilization and optimize cloud resources.
Security & Compliance
- BitLocker and encryption technologies.
- Support compliance audits and access certifications.
- Perform vulnerability remediation and security monitoring.
- Automate security governance and access review processes.
DevOps & Automation
- Design and develop automation using:
- PowerShell
- Python
- Microsoft Graph API
- Azure Automation
- REST APIs
- Automate user lifecycle management and identity workflows.
- Build automated reporting, monitoring, and operational dashboards.
- Implement Infrastructure as Code practices where appropriate.
Systems Administration
- Maintain server infrastructure and enterprise applications.
- Support in office applications such as badges, video, etc.
- Support DNS, DHCP, certificates, networking, and authentication services.
- Develop operational standards and documentation.
Project Leadership
- Lead infrastructure migration and transformation projects.
- Coordinate cross-functional technical initiatives.
- Provide technical guidance and mentoring to team members.
- Collaborate with vendors and business stakeholders.
Technical Skills
Microsoft Technologies
- Microsoft 365 Administration
- Exchange Online
- Teams Administration
- SharePoint Online
- OneDrive Administration
- Microsoft Intune
- Microsoft Entra ID
- Azure Active Directory Connect
- Azure Virtual Machines
- Azure Key Vault
- Azure Storage
- Azure Networking
- Microsoft Defender
Identity Platforms
- Okta Administration
- SAML Authentication
- SCIM Provisioning
- MFA Technologies
- Privileged Identity Management
Automation & Scripting
- PowerShell
- Python
- Microsoft Graph API
- Azure Automation
- REST APIs
- JSON
- Git
Infrastructure
- Active Directory
- Group Policy
- Windows Server
- DNS / DHCP
- Hybrid Identity
- Desktop Virtualization
- Endpoint Security
Preferred Qualifications
- 5+ years of Systems Engineering or Systems Administration experience.
- 3+ years administering Microsoft 365 and Azure environments.
- Experience with Intune, Entra ID, Azure, and Okta.
- Strong PowerShell and Python automation experience.
Key Performance Indicators
- Platform availability and uptime
- Security compliance metrics
- Automation coverage and efficiency gains
- Endpoint compliance rates
- Patch and vulnerability remediation performance
- User and device lifecycle accuracy
- Project delivery success
- Reduction of manual operational effort
(Equal Employment Opportunity has been, and will continue to be, a fundamental principle at Health Catalyst, where employment is based upon personal capabilities and qualification without discrimination or harassment on the basis of race, color, national origin, religion, sex, sexual orientation, gender identity, age, disability, citizenship status, marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law.. Health Catalyst is committed to a work environment where all individuals are treated with respect and dignity..)
The above statements describe the general nature and level of work being performed in this job function. They are not intended to be an exhaustive list of all duties, and indeed additional responsibilities may be assigned by Health Catalyst.
Studies show that candidates from underrepresented groups are less likely to apply for roles if they don’t have 100% of the qualifications shown in the job posting. While each of our roles have core requirements, please thoughtfully consider your skills and experience and decide if you are interested in the position. If you feel you may be a good fit for the role, even if you don’t meet all of the qualifications, we hope you will apply. If you feel you are lacking the core requirements for this position, we encourage you to continue exploring our careers page for other roles for which you may be a better fit.
At Health Catalyst, we appreciate the opportunity to benefit from the diverse backgrounds and experiences of others. Because of our deep commitment to respect every individual, Health Catalyst is an equal opportunity employer.
Skills Required
- Microsoft 365 administration (Exchange Online, Teams, SharePoint Online, OneDrive)
- Microsoft Intune and endpoint management
- Microsoft Entra ID / Azure AD and hybrid identity (Azure AD Connect)
- Azure infrastructure (VMs, Storage, Networking, Key Vault) administration
- Okta administration and SSO (SAML) integrations
- Active Directory, Group Policy, Windows Server, DNS, DHCP
- PowerShell scripting and automation
- Python scripting and automation
- Microsoft Graph API, REST APIs, JSON
- Azure Automation and Infrastructure as Code practices
- Endpoint security, Microsoft Defender, BitLocker, Windows Hello for Business
- SCIM provisioning, MFA, Privileged Identity Management
- Git (source control)
- Experience supporting macOS and Windows endpoints
- 5+ years of Systems Engineering or Systems Administration experience
- 3+ years administering Microsoft 365 and Azure environments
- Experience with Intune, Entra ID, Azure, and Okta
- Strong PowerShell and Python automation experience
Health Catalyst Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Health Catalyst and has not been reviewed or approved by Health Catalyst.
-
Healthcare Strength — Health coverage is described as comprehensive, including medical, dental, vision, mental-health support, wellness reimbursements, and programs like gym subsidies and fitness options. Feedback suggests the company manages plans proactively (including self-insurance) to enhance benefits such as primary care access and wellness incentives.
-
Leave & Time Off Breadth — Time off provisions are expansive, with flexible or unlimited PTO, a large holiday calendar, and paid volunteer and family leave. Feedback suggests the remote-first approach and supportive norms make it easier to take needed time without stigma.
-
Parental & Family Support — Family support includes paid parental leave and adoption assistance, with additional leave options that extend beyond typical offerings. Feedback suggests these policies help employees balance caregiving with work demands.
Health Catalyst Insights
What We Do
Health Catalyst is dedicated to enabling health care organizations to fundamentally improve care by building the most comprehensive and fully integrated suite of healthcare data warehousing and process improvement solutions available. Health Catalyst was formed by a group of healthcare veterans with vast data warehousing and quality improvement experience. Our founders and executives collaborated for nearly a decade to revolutionize clinical process models using analytics. During development, they faced numerous hurdles in the quest to develop a data warehouse that could handle the complexities unique to healthcare data. After determining that the predominant approaches to data modeling weren’t effective for healthcare data, they discovered the solution, which is now known as the Adaptive Data Architecture. Using a late-binding bus architecture, Catalyst’s adaptive data model is agile, flexible, and can be implemented in a matter of weeks compared to the months or years traditional approaches require. Today at Health Catalyst, you’ll work with a team of experts who know that healthcare needs to change—and have made the change it needs a reality. Transforming healthcare is our passion.
.jpeg)
