IT System Administrator

About the Role
The company is a fast-growing EdTech scale-up transforming how teams share knowledge. We build award-winning e-learning software used by global enterprises, and we’re just getting started. As an integral part of our team, you will gain hands-on AI experience and develop a future-proof skillset while contributing to a fast-moving, high-impact product.

What You’ll Do

• Manage and administer global Microsoft 365 tenant(s) (E3/E5) across multiple regions.
• Architect and maintain secure configurations across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Lead enterprise identity strategy using Microsoft Entra ID, including Conditional Access, Identity Protection, RBAC, and Privileged Identity Management (PIM).
• Enforce Zero Trust principles, least-privilege access, and Just-in-Time access models.
• Administer Microsoft Intune and Windows 365 environments, including device compliance policies, security baselines, and Autopilot provisioning.
• Lead global laptop provisioning for new hires, ensuring secure configuration and timely delivery.
• Own and manage the full Joiner-Mover-Leaver lifecycle globally, including onboarding and off-boarding across all systems and devices.
• Maintain an accurate and up-to-date IT asset inventory, including hardware and software tracking.
• Monitor global device health, compliance posture, and endpoint performance.
• Own and manage Microsoft Defender security suite (Endpoint, Office 365, Identity, Cloud Apps).
• Configure Microsoft Purview (DLP, retention policies, Insider Risk, eDiscovery, Sensitivity Labels).
• Monitor and respond to identity and endpoint security incidents in coordination with SOC teams.
• Manage global licensing strategy (E3/E5, add-ons, cost optimization).
• Support SIEM integrations (Microsoft Sentinel or third-party tools).
• Conduct periodic global access reviews, entitlement audits, and compliance checks.
• Develop PowerShell automation to streamline provisioning, deprovisioning, and administrative tasks.
• Maintain audit-ready documentation and support ISO 27001, SOC 2, and GDPR compliance efforts.
• Continuously improve operational efficiency, governance frameworks, and security posture.

What You'll Bring

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 2+ years of enterprise Microsoft 365 administration experience.
• 1+ year hands-on experience managing Microsoft E5 security capabilities.
• Strong expertise in Microsoft Entra ID, Conditional Access, PIM, and identity governance.
• Experience with Microsoft Intune, Windows 365, and endpoint security management.
• Hands-on experience with Microsoft Defender suite and security incident response.
• Solid understanding of Zero Trust architecture and identity-first security models.
• Experience operating within a multi-region or global organization.
• Strong PowerShell scripting and automation skills.
• Knowledge of compliance frameworks such as ISO 27001, SOC 2, and GDPR.
• Analytical, detail-oriented, and proactive with a strong security-first mindset.
• Ability to document processes clearly and support audit requirements.