Systems Administrator | Cloud Infrastructure & Security

KPFF is seeking a Systems Administrator to join our Shared Services IT team in Seattle. This role is primarily focused on Tier 1 and Tier 2 end user support desktop engineering endpoint management and deployment automation while also contributing to Microsoft cloud administration identity and access management security operations support and infrastructure projects as needed.

The Systems Administrator will serve as a key member of the IT team helping maintain and improve the firms Microsoft 365 Azure and security environments while supporting KPFF employees and contributing to technology initiatives that support KPFFs ongoing modernization and cloud transformation efforts.

This position is ideal for a technically strong IT professional who enjoys balancing day-to-day support and administration with automation security and infrastructure improvement projects.

As KPFF continues to modernize and expand its cloud-first technology environment this role offers the opportunity to grow into broader infrastructure cloud and security responsibilities while helping shape the future of Shared Services IT.

Why This Role Matters

This role will help expand KPFFs Shared Services IT capabilities strengthen operational support improve security readiness and support the firms ongoing transition toward a modern cloud-first technology environment. The Systems Administrator will play an important role in both day-to-day operations and the future evolution of IT across the organization.

What Youll DoSystems Administration & Operational Support

• Provide Tier 1 and Tier 2 technical support for KPFF employees.
• Support employee onboarding offboarding account provisioning and hardware deployment.
• Manage user accounts licenses permissions and endpoint configurations.
• Troubleshoot workstation application connectivity and authentication issues.
• Work with senior IT staff to automate endpoint deployment and management.
• Partner closely with senior IT staff to provide operational coverage support infrastructure and security initiatives and help ensure continuity across key IT functions.
• Support endpoint management through Microsoft Intune and Apple Business Manager including device enrollment compliance policies software deployment and lifecycle management.

Microsoft 365 Azure & Identity Administration

• Administer and support Microsoft 365 services including Exchange Online Teams SharePoint OneDrive and related platforms.
• Support Azure and Microsoft Entra ID administration including user lifecycle management permissions group management and identity governance.
• Assist with access management role assignments authentication policies and security controls.
• Troubleshoot cloud service identity and access-related issues.

Security Operations Support

• Assist with monitoring reviewing and triaging security alerts generated by internal tools and managed security providers.
• Support security investigations incident response activities and remediation efforts.
• Participate in periodic access reviews and least-privilege initiatives.
• Help maintain security policies controls and operational procedures.
• Collaborate with senior IT staff on security and compliance initiatives.

Automation & Process Improvement

• Develop and maintain PowerShell scripts to automate administrative and operational tasks.
• Identify opportunities to improve efficiency through automation and standardization.
• Create and maintain documentation runbooks and standard operating procedures.
• Contribute to continuous improvement of IT processes and service delivery.

Infrastructure & Technology Projects

• Participate in technology initiatives including:
  • Microsoft Entra ID migration efforts
  • Enterprise file services initiatives including ongoing Egnyte migration and administration efforts
  • Endpoint management improvements
  • Secure Access Service Edge (SASE) initiatives
  • Azure-based infrastructure projects
• Assist with testing deployment validation and user adoption activities.
• Support implementation of new technologies and operational processes.

Qualifications :

• 3 years of experience in systems administration infrastructure support cloud administration or a related IT role.
• Hands-on experience administering Microsoft 365 environments including Exchange Online Teams SharePoint and OneDrive.
• Experience administering Microsoft Azure and Microsoft Entra ID environments.
• Experience managing user accounts permissions identity and access controls.
• Demonstrates a professional and approachable desktop support demeanor with the patience courtesy active listening and clear communication skills needed to assist users effectively.
•  Takes ownership of support requests and follows through until each issue is fully resolved.
• Experience with PowerShell scripting and task automation.
• Understanding of networking fundamentals including DNS DHCP VPNs firewalls and authentication technologies.
• Strong troubleshooting documentation and communication skills.
• Ability to work independently and manage competing priorities.

Preferred Qualifications

• Experience supporting multi-site organizations.
• Experience with Microsoft Intune or other endpoint management platforms.
• Experience participating in cloud migration or infrastructure modernization projects.
• Exposure to security operations vulnerability management or compliance programs.
• Familiarity with SASE Zero Trust and modern identity security concepts.
• Familiarity with Egnyte Fortinet Arctic Wolf or similar platforms.
• Familiarity with both Microsoft and Apple hardware / operating systems is a plus.

Preferred Certifications

• CompTIA Security
• CompTIA Network
• Microsoft AZ-900
• Microsoft SC-900
• Fortinet Cisco Palo Alto or similar networking/security certifications

Additional Information :

Physical Demands and Work Environment:

• Duties are typically performed in a professional office environment while sitting or standing at a workstation.
• Ability to actively engage with a computer for extended periods of time troubleshoot hardware and software issues and communicate effectively via telephone email and virtual meeting platforms.
• May occasionally move transport or set up computer equipment monitors peripherals and other technology-related devices weighing up to 25 lbs.
• Occasional bending reaching crouching or crawling may be required when installing troubleshooting or supporting workstations conference room technology network equipment or office devices.
• Work primarily in the Seattle office with an expectation of being on-site a minimum of four days per week.

Additional information

Culture and Benefits:

At KPFF were not just coworkers; were a vibrant community fueled by collaborative creativity offering you the stage to leave a lasting mark through:

• Impact: Your work helps keep KPFFs people systems and data secure connected and productive.
• Autonomy Support: Enjoy independence within a stable environment and collaborative team.
• Growth: Experience learning opportunities and the freedom to engineer better processes and solutions.
• Community: Be part of a purposedriven firm that invests in people and the communities we serve.

Benefits:

We are passionate about supporting our employees through flexible and comprehensive Benefits:

• 401(k) retirement savings plan with employer contribution 
• Medical insurance
• Dental insurance
• Vision insurance
• Health Savings Account (HSA) with employer contribution
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• Life insurance
• KPFF Paid Family Leave 
• Short-term and Long-term disability insurance
• Paid Holidays (including two Floating Holidays)
• Paid Time Off (vacation sick jury duty)
• Subsidized ORCA bus/transit pass

Compensation:

The base salary for this role is competitive and will be determined based on the candidates experience education and skills. Compensation is dependent upon experience qualifications and overall alignment with the role at $95000-$125000. Additionally we offer performance-based bonuses to recognize and reward outstanding contributions in each Reporting Center. During the interview process well address any questions you may have about the overall compensation package and benefits.

#LI-AG1

KPFF Consulting Engineers participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.

KPFF Consulting Engineers is an equal opportunity employer and considers all qualified applicants for employment without regard to race color creed ethnicity national origin religion marital status sex/gender (including sexual orientation or gender identity) pregnancy veteran status citizenship status physical or mental disability or any other protected basis.

Remote Work :

No

Employment Type :

Full-time