On-site Microsoft Systems Administrator

PB&T Bank has been fulfilling financial needs and exceeding our customers' expectations since 1889. We are a full‑service bank, providing products and services for individuals and small businesses, specializing in commercial and construction lending. Over the years, PB&T Bank has remained independently owned and operated, allowing for a personal banking experience. Our customers know they can count on PB&T Bank for excellent products and exceptional customer service. Position Overview This position serves as the primary authority for PB&T Bank’s Microsoft ecosystem, with full ownership of the Microsoft 365 tenant, identity platform, and endpoint management strategy. The role is responsible for the design, implementation, and ongoing administration of both cloud and on‑premises Windows systems, ensuring security, compliance, and operational stability. Duties and Responsibilities Own and administer the Microsoft 365 tenant, including configuration, security, and optimization Serve as the primary authority for identity and access management, including Entra ID and hybrid Active Directory Design, implement, and maintain endpoint management and compliance policies using Microsoft Intune Administer data protection, compliance, and governance policies using Microsoft Purview Manage Exchange Online, including mail flow, security, and user lifecycle Develop and enforce standards for conditional access, MFA, and authentication security Lead implementation and support of Windows Server infrastructure, including Active Directory and Group Policy Manage virtualized environments (VMware) and server workloads Oversee server lifecycle management including provisioning, patching, and performance tuning Ensure alignment with regulatory and audit requirements Act as Tier 3 escalation for complex Microsoft platform issues Document systems and processes for continuity and audit readiness Collaborate on platform strategy, licensing, and long‑term planning Provide after‑hours support for critical infrastructure and ensure high availability Monitor and ensure license compliance for Microsoft and third‑party server software Support the Signature Banking culture through professionalism and accountability Support escalated Microsoft‑related user and system issues Assist in evaluating and adopting new Microsoft technologies Participate and suggest infrastructure projects and migrations Support business continuity and disaster recovery tests and strategies Maintain familiarity with evolving Microsoft 365 features and recommend adoption strategies when appropriate Supervisory Duties None; however, provides technical leadership and direction on Microsoft initiatives May be expected to mentor or provide direction to other team members during deployments, upgrades, or troubleshooting efforts Education Bachelor’s degree in IT or related field preferred Experience Minimum 7 years administering Microsoft environments Experience owning a Microsoft 365 tenant Hands‑on with Entra ID, Intune, and Purview Experience with hybrid Active Directory Background in virtualization and server infrastructure Experience with hybrid identity environments Proficiency in VMware and enterprise infrastructure Experience with Information Security planning, development, implementation, and management Strongest Knowledge, Abilities, and Skills Desired Advanced knowledge of Microsoft 365 administration (Entra ID, Intune, Purview, Exchange Online) Strong expertise in Windows Server, Active Directory, and Group Policy Strong technical communication skills Ability to design and enforce standards Documentation and knowledge‑sharing skills for operational continuity and project transitions Customer service skills with a focus on internal stakeholder support Advanced troubleshooting and root cause analysis Strong reasoning and analytical skills Effective oral and written communication skills Strong organizational and time management skills Operate independently as a Microsoft platform subject‑matter expert Adapt to evolving technologies Maintain continuous learning mindset Prioritize and execute tasks effectively Microsoft 365 administration portals (Entra ID, Intune, Purview, Exchange Admin Center) Network and server monitoring tools Location On‑site daily at one of our branches with available space. This is not a remote position . Locations available: Denver: 2351 S Colorado Blvd, Denver, CO 80222 Main bank: 301 W. 5th St. Pueblo, CO 81003 Job Posting Closing Date May 11, 2026, at the soonest. Posting may be extended as needed. To apply Candidates, please be sure that you apply through and complete an application even if you submit a resume. We are unable to hire applicants without a completed application. Job Type Full‑Time, Exempt (Salary) Estimated Pay Range $70,000-90,000 annually, negotiable depending on knowledge, experience, skills, education, and geographical location. Benefits Competitive Pay Health and Dental with generous bank contribution (Full‑Time Employees) Vision and other supplemental benefits (Full‑Time Employees) Bank Paid Group Term Life, Long‑Term Disability, Accidental Death Insurance (Full‑Time Employees) Vacation earned after 90 days Sick Time Birthday Time Off 401(k) with employer matching Employee Assistance Program Referral Incentive Program Health Savings Account with bi‑weekly bank contribution available (Full‑Time Employees) Equal Opportunity Employer PB&T Bank is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age (40+), ancestry, race, color, creed, religion, sex, pregnancy and related conditions, sexual orientation, marital status, gender identity, gender expression, national origin, disability, genetic information, or status as a protected veteran or affiliation with a veteran. In accordance with and under the circumstances described by Colorado law, PB&T Bank does not discriminate on the basis of marriage to a co‑worker. Accommodations Please reach out to View email address on click.appcast.io for assistance with accommodations needed during the application and interview process. Immigration Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time. Unsolicited Resumes Please note that unsolicited resumes from recruiting/talent agencies will not be accepted or considered. #J-18808-Ljbffr