Enterprise System Administrator (SY26-27)

Enterprise Systems Administrator

The Enterprise Systems Administrator will serve as a technical resource within Boston Public Schools Enterprise Systems & Security team responsible for the administration integration and support of the districts core enterprise platforms. This can include identity and access management systems Google Workspace Active Directory endpoint management platforms single sign-on (SSO) and security systems.

• Independently administer and support enterprise systems including Google Workspace identity and access management Active Directory SSO platforms directory synchronization tools and endpoint management platforms.

• Administer and maintain the organizations Mobile Device Management (MDM) environment including device enrollment configuration provisioning and lifecycle management for supported devices.

• Configure and manage system and device profiles policies restrictions applications security settings and compliance requirements in accordance with established technical and security standards.

• Manage device enrollment and deployment processes including integration with Apple Business Manager and other device-management platforms.

• Support enterprise endpoint security web filtering and related technology platforms.

• Monitor system and device status compliance inventory and system health; investigate and resolve issues affecting system functionality security or user access.

• Support the implementation configuration and deployment of new enterprise systems tools integrations and system enhancements.

• Monitor enterprise systems and platforms to identify performance availability security and compliance issues.

• Apply established security protocols and system configurations to support data protection and compliance with district policies.

• Maintain appropriate user and device access controls and ensure system configurations support organizational security requirements.

• Troubleshoot and resolve technical issues involving enterprise systems identity and access endpoint management and related platforms.

• Assist with system audits assessments and remediation activities.

• Coordinate with cybersecurity staff to address system security issues and maintain configurations in accordance with established security standards.

• Provide Tier 2 technical support for enterprise systems resolving issues escalated from the Service Desk.

• Troubleshoot and resolve complex issues involving Google Workspace Active Directory SSO MDM endpoint management and related enterprise platforms.

• Investigate system issues identify root causes and implement appropriate solutions within established procedures.

• Escalate issues requiring architectural security vendor or senior technical support.

• Coordinate with Service Desk and other IT teams to resolve escalated user and system issues.

• Manage user accounts permissions access device enrollment and system configurations in accordance with established policies and procedures.

• Manage application deployment updates configurations and removal across supported devices and platforms.

• Support automated device enrollment and deployment processes including Apple Business Manager and MDM integrations.

• Monitor device compliance inventory and lifecycle status and address issues affecting device functionality or security.

• Support staff in the effective and secure use of enterprise platforms applications and managed devices.

• Develop and maintain system documentation configuration procedures troubleshooting guides and operational documentation.

• Follow established standards and procedures for system administration access management endpoint management and security.

• Identify recurring issues and opportunities to improve system performance automation security reliability and user experience.

• Assist with testing documenting and implementing system improvements integrations and platform updates.

• Maintain current knowledge of enterprise systems cloud platforms identity management endpoint management Apple technologies and related technologies.

Total: 100%

• Bachelors degree in Information Technology Computer Science or related field (or equivalent experience).

• 3 to 5 years

List specific skills or talents that a qualified candidate should possess.

• Bachelors degree in information technology Computer Science or related field (or equivalent experience)

• 3 years of experience in enterprise systems administration or related technical roles

• Proven experience administering Google Workspace in an enterprise environment

• Experience with MDM platforms (e.g. JAMF Intune)

• Experience with identity management systems (e.g. Active Directory SSO directory sync tools)

• Experience supporting endpoint management and/or security platforms

• Strong troubleshooting and problem-solving skills

• Excellent communication and interpersonal skills

• Current authorization to work in the United States

• Google Workspace Administrator Certification

• Familiarity with cybersecurity tools (e.g. EDR web filtering systems)

• Experience in K12 education or public sector environments

• Experience supporting system integrations across multiple platforms

• Familiarity with Boston and Boston Public Schools

Essential job functions are the fundamental duties of a position the things a person holding the job absolutely must be able to do.

1. Regular and predictable attendance

2. Employee will be required to travel when needed

3. Employee will be required to host and facilitate calls using standard MS Office applications

1. Remain in a seated or stationary position for extended periods

2. Ability to work for extended periods of time leveraging office tools such as computers

3. Ability to work remotely in a quiet environment

4. Ability to host multi-hour conference calls

5. Ability to travel via car plane train bus

Disclaimer:This job description should not be construed to imply that these requirements are the exclusive standards of the position. Incumbents will follow any other instructions and perform any other related duties as may be required. The employer has the right to revise this job description at any time. The job description is not to be construed as a contract for employment.

Your employment with BPS is at will. This means your employment is for an indefinite period of time and it is subject to termination by you or BPS with or without cause with or without notice and at any time. Nothing in this policy or any other policy of BPS shall be interpreted to be in conflict with or to eliminate or modify in any way the at-will employment status of BPS employees.

BPS is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex gender identity sexual orientation race color religion national origin disability protected veteran status age or any other characteristic protected by law.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

BPS will not discharge or in any other manner discriminate against employees or applicants because they have inquired about discussed or disclosed their own pay or the pay of another employee or applicant. However employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information unless the disclosure is (a) in response to a formal complaint or charge (b) in furtherance of an investigation proceeding hearing or
action including an investigation conducted by the employer or (c) consistent with the contractors legal duty to furnish information. 41 CFR 60-1.35(c)

Required Experience:

Unclear Seniority