Senior Systems Administrator

NOTE: This position is open only to the current City of New York employees serving in a permanent Civil Service title of Computer Associate (Operations). To be considered for this position, PLEASE CLEARLY INDICATE YOUR CURRENT PERMANENT CIVIL SERVICE TITLE on your resume and cover letter. The New York City Comptroller’s Office works to promote the financial health, integrity, and effectiveness of New York City government, in order to strengthen trust, secure a thriving future for all New Yorkers, and build a more just, equitable, and resilient city. Led by an independently elected citywide official, the comptroller’s office provides checks and balances needed to hold City government accountable for budgeting wisely, investing responsibly, operating efficiently, acting fairly, living up to its obligations and promises, and paying attention to the long‑term challenges we face together. The Office of the Comptroller’s Bureau of Information Systems provides a full range of technology support services for key business functions and Charter mandated responsibilities of the Comptroller’s Office. These services include technology strategic planning, web site development, graphic design, disaster recovery, systems development, network administration, audio/visual services, business process re‑engineering, change management, program management, security administration, service desk, computer operations, telecommunications, and document management. Under the direction of the Director of IT Operations & Network Services, the Senior Systems Administrator manages Active Directory provisioning, Office 365 administration, ATP monitoring, security administration and MS security updates. Tasks Include, But Are Not Limited To, The Following Microsoft Active Directory Administration Provide identity management functions for entire account lifecycle, including creation, modifying, and separation accounts from the environment. Perform and monitor security administration by modifying users, groups and application links, passwords etc. for all agency critical systems. Microsoft Endpoint Manager / Microsoft Intune Administration Test, deploy, and report on MS security updates and MECM patch management & software deployments to servers and clients; monitor for new updates. Provide Intune administration for desktops, laptops, and mobile devices. Provide Tier 2 support with desktops, laptops, and mobile devices in regard to missing patches and/or Intune compliancy. Develop and maintain agency standard MS Windows image. Microsoft 365 Administration Maintaining security by monitoring the system for potential vulnerabilities, identifying and mitigating risks. Perform and monitor Microsoft 365 product licensing, permissions, features, and group access. Manage Exchange Online, including mailbox permissions, quarantined items. Troubleshooting technical issues such as email delivery failures or authentication problems. Managing the deployment of new features or functionality after they have been tested in a staging environment. Analyze and monitor Microsoft Office 365 ATP management alerts and email quarantine for policy violations/escalation. Physical Security System Administration Administer the current key card access system, assigning/removing appropriate access to users as required. Monitor video surveillance cameras to ensure all are recording properly. Lead with security vendor on scoping, quoting, and installing new card readers or video surveillance cameras. Information Technology Support Assist in maintaining the agency's network security policies, standards, and procedures. Provide Tier 2 technology support to team members of the Service Desk as an escalation point for unsolved issues. Utilize the agency’s trouble ticket management software. Participate in technical working groups strategizing for future requirements and propose architecture enhancements based on business needs. Research and recommend innovative approaches for system administration tasks. Prepare security related reports using different applications for management. Print Management Administration Setup, configure, and deploy printers throughout the agency. Provide Tier 2 support for Print environment, including Secure LDAP sign‑in, Secure Print, Scanning from Multi‑Function Printers. Manage the managed service portal for service and consumable’s replacement on the printers. Fax Solution Administration Administer the current fax solution, including adding, changing, removing users/mailboxes that need to receive incoming faxes. Setup multifunction printers to receive incoming faxes where needed. Setup inbound fax numbers to route to network fileshares through city ftp server and scheduled scripts to route appropriately. Powershell Scripting & Coding Ability to maintain, write and modify existing and new scripts integrating with MS365 environment. Ability to integrate PowerShell scripts with MS SQL Server. Minimum Qualifications A certificate from an accredited technical school (approximately 675 hours) with a specialization in computer operations, and two years of satisfactory full‑time computer operations experience, in a large‑scale networked, multi‑tiered, or mainframe computer environment, or two years of satisfactory data communications network experience working in a mainframe or multi‑tiered computer environment; or A baccalaureate degree from an accredited college or university and three years of satisfactory full‑time experience as described in “1” above; or A four‑year high school diploma or its educational equivalent and four years of satisfactory full‑time experience as described in “1” above; or A satisfactory combination of education and/or experience equivalent to “1”, “2”, or “3” above. However, all candidates must have at least two years of full‑time experience as described in “1” above. Preferred Skills 2‑3 years of experience in Microsoft Server Administration with MCSA certification. Expertise in Microsoft Endpoint Configuration Management (MECM) / Microsoft Intune for servers and workstations. Expertise in Active Directory Administration, including, but not limited to, Account Creation, Security Permissions, DNS, DHCP, Group Policy Management, Print Management, and Sites and Services management. Expertise in Microsoft Windows Desktop operating system and Microsoft Office suite of applications. Working knowledge of Microsoft 365 products, including Exchange Online, SharePoint, OneDrive, PowerShell, Microsoft Azure. Experience in reading MECM client Logs and Patch compliance. Working knowledge of Advanced Threat Protection technology and policies creation. Working knowledge of multi‑factor authentication technology. Ability to work in a team environment. Ability to plan, organize and work on multiple tasks simultaneously. Strong communication skills. 55a Program This position is also open to qualified persons with a disability who are eligible for the 55‑a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55‑a Program. Public Service Loan Forgiveness As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at Residency Requirement New York City Residency is not required for this position. Additional Information The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy. #J-18808-Ljbffr